NAME

       sepolicy-communicate - Generate a report showing if two SELinux Policy Domains can communicate

SYNOPSIS

       sepolicy communicate [-h] -s SOURCE -t TARGET [-c TCLASS] [-S SOURCEACCESS] [-T TARGETACCESS]

DESCRIPTION

       Use  sepolicy  communicate  to  examine  SELinux  Policy  and  determine  if  a source SELinux Domain can
       communicate with a target SELinux Domain.  The default command looks to see if there are any  file  types
       that the source domain can write, which the target domain can read.

OPTIONS

       -c, --class
              Specify  the  SELinux  class  which  the source domain will attempt to communicate with the target
              domain.  (Default file)

       -h, --help
              Display help message

       -s, --source
              Specify the source SELinux domain type.

       -S, --sourceaccess
              Specify the list of accesses used by the source SELinux domain type to communicate with the target
              domain. Default Open, Write.

       -t, --target
              Specify the target SELinux domain type.

       -T, --targetaccess
              Specify the list of accesses used by the target SELinux domain type to receive communications from
              the source domain. Default Open, Read.

EXAMPLE

       List types that can be used to communicate between samba daemon and apache server
       # sepolicy communicate -s httpd_t -t smbd_t
       Consider a type to be accessible by the source domain when it can be opened and appended to (as opposed to opened and written to)
       # sepolicy communicate -s httpd_t -t smbd_t -S open,append

AUTHOR

       This man page was written by Daniel Walsh <dwalsh@redhat.com>

SEE ALSO

       sepolicy(8), selinux(8)

                                                    20121005                             sepolicy-communicate(8)