NAME

       semanage-permissive - SELinux Policy Management permissive mapping tool

SYNOPSIS

       semanage  permissive  [-h]  [-n]  [-N] [-S STORE] (--add TYPE | --delete TYPE | --deleteall | --extract |
       --list)

DESCRIPTION

       semanage is used to configure certain elements of SELinux policy without  requiring  modification  to  or
       recompilation  from  policy  sources.   semanage  permissive  adds or removes a SELinux Policy permissive
       module. Please note that this command can make any domain permissive, but can only remove the  permissive
       property  from  domains  where  it was added by semanage permissive ("semanage permissive -d" can only be
       used on types listed as "Customized Permissive Types" by "semanage permissive -l").

OPTIONS

       -h, --help
              Show this help message and exit

       -a, --add
              Add a record of the specified object type

       -d, --delete
              Delete a record of the specified object type

       -D, --deleteall
              Remove all local customizations of permissive domains

       -l, --list
              List records of the specified object type

       -E, --extract
              Extract customizable commands, for use within a transaction

       -n, --noheading
              Do not print heading when listing the specified object type

       -N, --noreload
              Do not reload the policy after commit

       -S STORE, --store STORE
              Select an alternate SELinux Policy Store to manage

EXAMPLE

       List all permissive domains ("Builtin Permissive Types" where set by the system policy, or a custom policy module)
       # semanage permissive -l
       Make httpd_t (Web Server) a permissive domain
       # semanage permissive -a httpd_t

SEE ALSO

       selinux(8), semanage(8)

AUTHOR

       This man page was written by Daniel Walsh <dwalsh@redhat.com>

                                                    20130617                              semanage-permissive(8)