NAME

       semanage-permissive - SELinux Policy Management permissive mapping tool

SYNOPSIS

       semanage  permissive [-h] [-n] [-N] [-S STORE] (--add TYPE | --delete TYPE | --deleteall |
       --extract | --list)

DESCRIPTION

       semanage is used to  configure  certain  elements  of  SELinux  policy  without  requiring
       modification to or recompilation from policy sources.  semanage permissive adds or removes
       a SELinux Policy permissive module. Please note that this  command  can  make  any  domain
       permissive, but can only remove the permissive property from domains where it was added by
       semanage permissive ("semanage permissive  -d"  can  only  be  used  on  types  listed  as
       "Customized Permissive Types" by "semanage permissive -l").

OPTIONS

       -h, --help
              Show this help message and exit

       -a, --add
              Add a record of the specified object type

       -d, --delete
              Delete a record of the specified object type

       -D, --deleteall
              Remove all local customizations of permissive domains

       -l, --list
              List records of the specified object type

       -E, --extract
              Extract customizable commands, for use within a transaction

       -n, --noheading
              Do not print heading when listing the specified object type

       -N, --noreload
              Do not reload the policy after commit

       -S STORE, --store STORE
              Select an alternate SELinux Policy Store to manage

EXAMPLE

       List all permissive domains ("Builtin Permissive Types" where set by the system policy, or a custom policy module)
       # semanage permissive -l
       Make httpd_t (Web Server) a permissive domain
       # semanage permissive -a httpd_t

SEE ALSO

       selinux(8), semanage(8)

AUTHOR

       This man page was written by Daniel Walsh <dwalsh@redhat.com>

                                             20130617                      semanage-permissive(8)