usage: /usr/bin/semodule [option]... MODE... Manage SELinux policy modules. MODES: -R, --reload reload policy -B, --build build and reload policy -D,--disable_dontaudit Remove dontaudits from policy -i,--install=MODULE_PKG install a new module -r,--remove=MODULE_NAME remove existing module at desired priority -l[KIND],--list-modules[=KIND] display list of installed modules KIND: standard list highest priority, enabled modules full list all modules -X,--priority=PRIORITY set priority for following operations (1-999) -e,--enable=MODULE_NAME enable module -d,--disable=MODULE_NAME disable module -E,--extract=MODULE_NAME extract module Options: -s,--store name of the store to operate on -N,-n,--noreload do not reload policy after commit -h,--help print this message and quit -v,--verbose be verbose -P,--preserve_tunables Preserve tunables in policy -C,--ignore-module-cache Rebuild CIL modules compiled from HLL files -g,--config=PATH use an alternate path for the semanage config -p,--path use an alternate path for the policy root -S,--store-path use an alternate path for the policy store root -c, --cil extract module as cil. This only affects module extraction. -H, --hll extract module as hll. This only affects module extraction. -m, --checksum print module checksum (SHA256). --refresh like --build, but reuses existing linked policy if no changes to module files are detected (via checksum) Deprecated options: -b,--base same as --install --rebuild-if-modules-changed same as --refresh