OS Manuals

/usr/bin/semodule

SELinux policy core utilities

From policycoreutils 3.11-r3 (enterprise-packages), captured 2026-11-08 by running semodule --help (exit 0). permalink

usage:  /usr/bin/semodule [option]... MODE...
Manage SELinux policy modules.
MODES:
  -R, --reload		    reload policy
  -B, --build		    build and reload policy
  -D,--disable_dontaudit    Remove dontaudits from policy
  -i,--install=MODULE_PKG   install a new module
  -r,--remove=MODULE_NAME   remove existing module at desired priority
  -l[KIND],--list-modules[=KIND]  display list of installed modules
     KIND:  standard  list highest priority, enabled modules
            full      list all modules
  -X,--priority=PRIORITY    set priority for following operations (1-999)
  -e,--enable=MODULE_NAME   enable module
  -d,--disable=MODULE_NAME  disable module
  -E,--extract=MODULE_NAME  extract module
Options:
  -s,--store	   name of the store to operate on
  -N,-n,--noreload do not reload policy after commit
  -h,--help        print this message and quit
  -v,--verbose     be verbose
  -P,--preserve_tunables	Preserve tunables in policy
  -C,--ignore-module-cache	Rebuild CIL modules compiled from HLL files
  -g,--config=PATH use an alternate path for the semanage config
  -p,--path        use an alternate path for the policy root
  -S,--store-path  use an alternate path for the policy store root
  -c, --cil extract module as cil. This only affects module extraction.
  -H, --hll extract module as hll. This only affects module extraction.
  -m, --checksum   print module checksum (SHA256).
      --refresh    like --build, but reuses existing linked policy if no
                   changes to module files are detected (via checksum)
Deprecated options:
  -b,--base	   same as --install
  --rebuild-if-modules-changed
                   same as --refresh
Options (25)
OptionDescriptionSource
-R, --reloadreload policyhelp
-B, --buildbuild and reload policyhelp
-D, --disable_dontauditRemove dontaudits from policyhelp
-i, --install MODULE_PKGinstall a new modulehelp
-r, --remove MODULE_NAMEremove existing module at desired priorityhelp
-l, --list-modules KINDdisplay list of installed modules KIND: standard list highest priority, enabled modules full list all moduleshelp
-X, --priority PRIORITYset priority for following operations (1-999)help
-e, --enable MODULE_NAMEenable modulehelp
-d, --disable MODULE_NAMEdisable modulehelp
-E, --extract MODULE_NAMEextract modulehelp
-s, --storename of the store to operate onhelp + man
-h, --helpprints help message and quithelp + man
-v, --verbosebe verbosehelp + man
-P, --preserve_tunablesPreserve tunables in policyhelp + man
-C, --ignore-module-cacheRebuild CIL modules compiled from HLL fileshelp + man
-p, --pathuse an alternate path for the policy roothelp + man
-S, --store-pathuse an alternate path for the policy store roothelp + man
-m, --checksumAdd SHA256 checksum of modules to the list output.help + man
--refreshlike --build, but reuses existing linked policy if no changes to module files are detected (via checksum)help
-b, --basesame as --installhelp
--rebuild-if-modules-changedsame as --refreshhelp
-n, --noreload, -Ndo not reload policy after commit (in the manual page but not in --help)man
-g, --config PATHuse an alternate path for the semanage config (in the manual page but not in --help)man
-c, --cilExtract module as a CIL file. (in the manual page but not in --help)man
-H, --hllExtract module as an HLL file. (in the manual page but not in --help)man
Examples (18) from the manual page, untested

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.