Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   18644 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

netlabelctl(1)		    NetLabel Documentation		netlabelctl(1)

NAME
       netlabelctl - NetLabel control utility

SYNOPSIS
       netlabelctl [<flags>] <module> [<commands>]

DESCRIPTION
       netlabelctl  allows privileged users to query and manipulate the NetLa‐
       bel subsystem within the kernel.

OPTIONS
       Flags

       -h     Help message

       -p     Attempt to make the output "pretty"

       -t <seconds>
	      Set a timeout to be used when waiting for the NetLabel subsystem
	      to respond

       -v     Enable extra output

       -V     Display the version information

       Modules

       mgmt   The following commands are valid within this module

	      version
	      protocols

       map    The following commands are valid within this module

	      add default|domain:<domain> protocol:<protocol>[,<extra>]
	      del default|domain:<domain>
	      list

       unlbl  The following commands are valid within this module

	      accept on|off
	      list

       cipsov4
	      The following commands are valid within this module

	      add std doi:<DOI> tags:<T1>,<Tn> levels:<LL1>=<RL1>,<LLn>=<RLn>
		      categories:<LC1>=<RC1>,<LCn>=<RCn>
	      add pass doi:<DOI> tags:<T1>,<Tn>
	      del doi:<DOI>
	      list [doi:<DOI>]

EXAMPLES
       netlabelctl   cipsov4   add   std  doi:8	 tags:1	 levels:0=0,1=1	 cate‐
       gories:0=1,1=0
	      Add a CIPSO/IPv4 mapping with a DOI value of  "8",  using	 CIPSO
	      tag "1" (the permissive bitmap tag).  The specified mapping con‐
	      verts local LSM levels "0" and "1" to CIPSO levels "0"  and  "1"
	      respectively  while  local LSM categories "0" and "1" are mapped
	      to CIPSO categories "1" and "0" respectively.

       netlabelctl map add domain:lsm_specific_string protocol:cipsov4,8
	      Add a domain mapping so that  all	 outgoing  packets  asscoiated
	      with  the	 specified LSM domain string will be labeled according
	      to the CIPSO/IPv4 protocol using DOI 8.

NOTES
       This program is currently under development, please report any bugs  to
       the author.

AUTHOR
       Paul Moore <paul.moore@hp.com>

SEE ALSO
       <other pages to be created at a future date>

paul.moore@hp.com		 14 July 2006			netlabelctl(1)

Vote for polarhome