NAME

smackcipso - Load Smack cipso rules into the kernel

SYNOPSIS

smackcipso <path>

DESCRIPTION

smackcipso is a tool that can be used to load cipso rules into the kernel. The general use of smackcipso is to read a set of rules from a file, but it also supports the convenience of loading rules from the command line. This process needs to be started with CAP_MAC_ADMIN capability otherwise it will not have sufficient permission to make the changes. Launching smackcipso without a path name will allow you to enter rules on the command line, these take the format "%s%4d%4d[%4d]...\n" (subject lvl cnt c1 c2 ...) with ^D terminating the session and writing the rules to the kernel.

path

The path to the file from which to read the rules

EXIT STATUS

On success smackload returns 0 and 1 on failure.