NAME¶

fagenrules - a script that merges component fapolicyd rule files

SYNOPSIS¶

fagenrules [--check] [--load]

DESCRIPTION¶

fagenrules is a script that merges all component fapolicyd rules files, found in the fapolicyd rules directory, /etc/fapolicyd/rules.d, placing the merged file in /etc/fapolicyd/compiled.rules. Component fapolicyd rule files, must end in .rules in order to be processed. All other files in /etc/fapolicyd/rules.d are ignored.

The files are concatenated in order, based on their natural sort (see -v option of ls(1)) and stripped of empty and comment (#) lines.

The generated file is validated with the daemon policy parser before installation. If it differs from the existing compiled rules, it is synced and atomically renamed into /etc/fapolicyd/compiled.rules so the previous compiled rules remain in place on validation or installation failure.

fagenrules prints the final SHA-256 ruleset identity when the installed compiled rules are unchanged or successfully updated.

OPTIONS¶

--check

test if rules have changed and need updating without overwriting compiled.rules.

--load

load old or newly built rules into the daemon.

FILES¶

/etc/fapolicyd/rules.d/ /etc/fapolicyd/compiled.rules

SEE ALSO¶

fapolicyd.rules(5), fapolicyd-cli(8), fapolicyd(8).