NAME

       sepolicy-communicate  -  Generate  a  report  showing  if  two  SELinux Policy Domains can
       communicate

SYNOPSIS

       sepolicy  communicate  [-h]  -s  SOURCE  -t  TARGET  [-c  TCLASS]  [-S  SOURCEACCESS]  [-T
       TARGETACCESS]

DESCRIPTION

       Use  sepolicy  communicate  to  examine  SELinux  Policy and determine if a source SELinux
       Domain can communicate with a target SELinux Domain.  The default command looks to see  if
       there  are  any  file  types that the source domain can write, which the target domain can
       read.

OPTIONS

       -c, --class
              Specify the SELinux class which the source domain will attempt to communicate  with
              the target domain.  (Default file)

       -h, --help
              Display help message

       -s, --source
              Specify the source SELinux domain type.

       -S, --sourceaccess
              Specify  the list of accesses used by the source SELinux domain type to communicate
              with the target domain. Default Open, Write.

       -t, --target
              Specify the target SELinux domain type.

       -T, --targetaccess
              Specify the list of accesses used by the target  SELinux  domain  type  to  receive
              communications from the source domain. Default Open, Read.

EXAMPLE

       List types that can be used to communicate between samba daemon and apache server
       # sepolicy communicate -s httpd_t -t smbd_t
       Consider a type to be accessible by the source domain when it can be opened and appended to (as opposed to opened and written to)
       # sepolicy communicate -s httpd_t -t smbd_t -S open,append

AUTHOR

       This man page was written by Daniel Walsh <dwalsh@redhat.com>

SEE ALSO

       sepolicy(8), selinux(8)

                                             20121005                     sepolicy-communicate(8)