/usr/bin/checkmodule

usage:  /usr/bin/checkmodule [-h] [-V] [-b] [-C] [-E] [-U handle_unknown] [-m] [-M] [-N] [-L] [-o FILE] [-c VERSION] [INPUT]
Build base and policy modules.
Options:
  INPUT      build module from INPUT (else read from "policy.conf")
  -V         show policy versions created by this program
  -b         treat input as a binary policy file
  -C         output CIL policy instead of binary policy
  -E         treat warnings as errors
  -h         print usage
  -U OPTION  How to handle unknown classes and permissions
               deny: Deny unknown kernel checks
               reject: Reject loading of policy with unknowns
               allow: Allow unknown kernel checks
  -m         build a policy module instead of a base module
  -M         enable MLS policy
  -N         do not check neverallow rules
  -L         output line markers for allow rules
  -o FILE    write module to FILE (else just check syntax)
  -c VERSION build a policy module targeting a modular policy version (4-24)