You can get a list of types by running the command seinfo -t.
But note, not all types are object types, some are considered domain types.
A typically more surgical command is sesearch which might offer you more of an explanation of what you want. You can for example find out all the permitted files that httpd_t can access using sesearch.
You can get a list of types by running the command
seinfo -t
.But note, not all types are object types, some are considered domain types.
A typically more surgical command is
sesearch
which might offer you more of an explanation of what you want. You can for example find out all the permitted files thathttpd_t
can access usingsesearch
.Or perhaps you're only interested in the files
httpd_t
can write..Alternatively, perhaps you want to know what types have the ability to write into certain files like
httpd_log_t
.Furthermore if you want to know what classes of objects there are and the permissions available for them, a list can be obtained using
seinfo -xc
.All these in combination let you create custom sesearch rules to look through policy and see what is permitted.