Selinux grammar

From FedoraProject

Revision as of 12:56, 17 October 2008 by Rambham (Talk | contribs)

Jump to: navigation, search

This is my attempt at documenting the policy grammar that is accepted by checkpolicy.

Comments start with a # character and continue to the end of the line.

Keywords can be in all uppercase or all lowercase.

Convention followed in this document: Items in bold are literal, they must appear in the policy file exactly as written. Items in bold italics are used for things that can be replaced by some user specified text. They will also be surrounded with < and > signs to make them clearly different from keywords.

A file must contain either a base_policy or a module_policy.

module_policy = module <identifier> <version_identifier> ;