SYNOPSIS

tomoyo-setprofile [option] number <domain> [<domain> ...]

DESCRIPTION

This program assigns the specified profile number to the specified domain.

Before this program can be invoked, you must register it in /sys/kernel/security/tomoyo/manager. After initializing policy, this is usually as simple as rebooting the system.

OPTIONS

-r

Apply the specified profile number to all domains whose domain name starts with the specified string.

number

The profile number must be an integer between 0 and 255.

<domain>

The string must be quoted or escaped to avoid misinterpretation by the shell. It only matches an exact string unless the "-r" option is specified.

EXAMPLES

Assign profile 0 to all domains

  tomoyo-setprofile -r 0 '<kernel>'

Assign profile 1 to sshd and httpd domains

  tomoyo-setprofile 1 '<kernel> /usr/sbin/sshd' '<kernel> /usr/sbin/httpd'

AUTHORS

Tetsuo Handa <[email protected]>

Main author.

Jamie Nguyen <[email protected]>

Documentation and website.