NAME

smackload - Load and unload Smack rules from the kernel

SYNOPSIS

smackload [-c] <path>

DESCRIPTION

smackload is a tool that can be used to load Smack rules into the kernel or to remove rules that have already been loaded. The general use of smackload is to read a set of rules from a file, but it also supports the convenience of loading rules from the command line. This process needs to be started with CAP_MAC_ADMIN capability otherwise it will not have sufficient permission to make the changes. Launching smackload without a path name will allow you to enter rules on the command line, these take the format "%s %s %s\n" (subject object access_type) with ^D terminating the session and writing the rules to the kernel. The access_type refers to the access modes that are from the set "rwaxt", which refer to read, write, append, execute and transmute access respectively

OPTIONS

-c

Clear the specified rules from the kernel

path

The path to the file from which to read the rules

EXIT STATUS

On success smackload returns 0 and 1 on failure.