Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   29550 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

sepolicy-network(8)					   sepolicy-network(8)

NAME
       sepolicy-network	 -  Examine  the SELinux Policy and generate a network
       report

SYNOPSIS
       sepolicy network [-h] (-l | -a application [application ...] | -p  PORT
       [PORT ...] | -t TYPE [TYPE ...] | -d DOMAIN [DOMAIN ...])

DESCRIPTION
       Use  sepolicy  network  to  examine SELinux Policy and generate network
       reports.

OPTIONS
       -a, --application
	      Generate a report listing the ports to which the specified  init
	      application is allowed to connect and or bind.

       -d, --domain
	      Generate	a  report  listing  the	 ports	to which the specified
	      domain is allowed to connect and or bind.

       -l, --list
	      List all Network Port Types defined in SELinux Policy

       -h, --help
	      Display help message

       -t, --type
	      Generate a report listing the port numbers  associate  with  the
	      specified SELinux port type.

       -p, --port
	      Generate	a report listing the SELinux port types associate with
	      the specified port number.

EXAMPLES
       sepolicy network -p 22
       22: tcp ssh_port_t 22
       22: udp reserved_port_t 1-511
       22: tcp reserved_port_t 1-511

       sepolicy network -a /usr/sbin/sshd
       sshd_t: tcp name_connect
	    111 (portmap_port_t)
	    53 (dns_port_t)
	    88, 750, 4444 (kerberos_port_t)
	    9080 (ocsp_port_t)
	    9180, 9701, 9443-9447 (pki_ca_port_t)
	    32768-61000 (ephemeral_port_t)
	    all ports < 1024 (reserved_port_type)
	    all ports with out defined types (port_t)
       sshd_t: tcp name_bind
	    22 (ssh_port_t)
	    5900-5983, 5985-5999 (vnc_port_t)
	    6000-6020 (xserver_port_t)
	    32768-61000 (ephemeral_port_t)
	    all ports > 500 and	 < 1024 (rpc_port_type)
	    all ports with out defined types (port_t)
       sshd_t: udp name_bind
	    32768-61000 (ephemeral_port_t)
	    all ports > 500 and	 < 1024 (rpc_port_type)
	    all ports with out defined types (port_t)

AUTHOR
       This man page was written by Daniel Walsh <dwalsh@redhat.com>

SEE ALSO
       sepolicy(8), selinux(8), semanage(8)

				   20121005		   sepolicy-network(8)

Vote for polarhome