semanage-port(8) semanage-port(8)

# [NAME](#NAME)

**semanage-port - SELinux Policy Management port mapping tool**

# [SYNOPSIS](#SYNOPSIS)

**semanage port \[-h] \[-n] \[-N] \[-S STORE] \[ --add -t TYPE -p PROTOCOL -r RANGE port\_name | port\_range | --delete -p PROTOCOL port\_name | port\_range | --deleteall | --extract | --list \[-C] | --modify -t TYPE -p PROTOCOL -r RANGE port\_name | port\_range ]**

# [DESCRIPTION](#DESCRIPTION)

semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources. **semanage port** controls the port number to port type definitions.

# [OPTIONS](#OPTIONS)

[*-h, --help*](#h,)

Show this help message and exit

[*-n, --noheading*](#n,)

Do not print heading when listing the specified object type

[*-N, --noreload*](#N,)

Do not reload policy after commit

[*-S STORE, --store STORE*](#S)

Select an alternate SELinux Policy Store to manage

[*-C, --locallist*](#C,)

List local customizations

[*-a, --add*](#a,)

Add a record of the specified object type

[*-d, --delete*](#d,)

Delete a record of the specified object type

[*-m, --modify*](#m,)

Modify a record of the specified object type

[*-l, --list*](#l,)

List records of the specified object type

[*-E, --extract*](#E,)

Extract customizable commands, for use within a transaction

[*-D, --deleteall*](#D,)

Remove all local customizations

[*-t TYPE, --type TYPE*](#t)

SELinux type for the object

[*-r RANGE, --range RANGE*](#r)

MLS/MCS Security Range (MLS/MCS Systems only) SELinux Range for SELinux login mapping defaults to the SELinux user record range. SELinux Range for SELinux user defaults to s0.

[*-p PROTO, --proto PROTO*](#p)

Protocol for the specified port (tcp|udp|dccp|sctp) or internet protocol version for the specified node (ipv4|ipv6).

# [EXAMPLE](#EXAMPLE)

```
List all port definitions
# semanage port -l
Allow Apache to listen on tcp port 81 (i.e. assign tcp port 81 label http_port_t, which apache is allowed to listen on)
# semanage port -a -t http_port_t -p tcp 81
Allow sshd to listen on tcp port 8991 (i.e. assign tcp port 8991 label ssh_port_t, which sshd is allowed to listen on)
# semanage port -a -t ssh_port_t -p tcp 8991
Add a custom port 9999 with MLS range s0:c0.c255 (MLS/MCS systems only). Verify with seinfo.
# semanage port -a -t http_port_t -p tcp -r s0:c0.c255 9999
# seinfo --portcon -x | grep 9999
```

# [SEE ALSO](#SEE_ALSO)

[**selinux**(8)](/man/enterprise-packages/py3-sepolgen/selinux.8), [**semanage**(8)](/man/enterprise-packages/py3-sepolgen/semanage.8)

# [AUTHOR](#AUTHOR)

This man page was written by Daniel Walsh <dwalsh@redhat.com>

20130617

---

Document: semanage-port(8) from py3-sepolgen 3.11-r1 (Chainguard OS)
Source: https://github.com/SELinuxProject/selinux.git