seinfo

Display policy statistics for the current system policy

$ seinfo

$ seinfo -t

$ seinfo -t [httpd_t] -x

$ seinfo -a [exec_type] -x

$ seinfo -r

$ seinfo -b

$ seinfo --constrain [file]

$ seinfo [options] [path/to/policy]

seinfo [options] [expression] [policy]

seinfo is a SELinux policy query tool that allows users to examine the components of a SELinux policy. It can analyze both binary and source policies, providing detailed information about types, attributes, roles, users, booleans, object classes, and constraints.
If no policy file is provided, seinfo searches for the system default policy: first checking for a source policy, then for a binary policy matching the running kernel's preferred version, and finally for the highest version available. The tool supports loading policies in source format (policy.conf), binary format (e.g., policy.20), or modular format with loadable policy modules.
seinfo is part of the SETools suite and is commonly used for policy analysis, debugging, and security auditing on SELinux-enabled systems.

-a [ATTR]

Display type attributes or details for a named attribute.

Show booleans or specific boolean configuration.

List object classes or permissions for a specific class.

Query roles or role-specific information.

Examine types or their assigned attributes.

Display users or user statements.

Show categories or associated sensitivities.

List common permission sets.

Display constraints and mlsconstraints for an object class.

Query all policy components.

Print additional details for each component matching the expression.

Exclude formatting headers and indentation.

Display extra informational content.

Activate debugging output.

Display help documentation.

Show version information.

Policy files must be readable by the user running seinfo. When analyzing modular policies, the first module listed must be a base module. Some query options may produce large outputs on complex policies; use --flat or pipe to pagers for better readability.

seinfo is part of the SETools project, a collection of SELinux policy analysis tools originally developed by Tresys Technology. SETools was created to help administrators and security professionals understand and manage SELinux policies. The project has been maintained and updated alongside SELinux development, with versions evolving to support new policy features and formats.

sesearch(1), sediff(1), semanage(8), getenforce(1), selinux(8)