NAME

smackctl - Load and unload the system Smack rules files

SYNOPSIS

smackctl ['apply'] ['clear'] ['status']

DESCRIPTION

smackctl is a program to load and unload the Smack context configurations. It is generally called by an init process on startup and shutdown of the system when it is needed to change the Smack rules in the kernel. The Smack system configuration files are stored in configuration directories (see FILES below).

OPTIONS

apply

Apply all the rules found in the configuration directories (/etc/smack/accesses.d and /etc/smack/cipso.d)

clear

Remove all system rules from the kernel.

status

Show the status of the Smack system, specifically if smackfs filesystem is mounted and where.

EXIT STATUS

On success smackctl returns 0 and 1 on failure.

FILES

/smack or /sys/fs/smackfs
/etc/smack/acceses.d
/etc/smack/cipso.d