semodule_expand(8) — Linux manual page


SEMODULE_EXPAND(8)                 NSA                SEMODULE_EXPAND(8)

NAME         top

       semodule_expand - Expand a SELinux policy module package.

SYNOPSIS         top

       semodule_expand [-V ] [ -a ] [ -c [version]] basemodpkg

DESCRIPTION         top

       semodule_expand is a developer tool for manually expanding a base
       policy module package into a kernel binary policy file.  This
       tool is not necessary for normal operation of SELinux.  In normal
       operation, such expanding is performed internally by libsemanage
       in response to semodule commands.  Base policy module packages
       can be created directly by semodule_package or by semodule_link
       (when linking together a set of packages into a single package).

OPTIONS         top

       -V     show version

       -c [version]
              policy version to create

       -a     Do not check assertions.  This will cause the policy to
              not check any neverallow rules.

SEE ALSO         top

       checkmodule(8), semodule_package(8), semodule(8),
       semodule_link(8) (8),

AUTHORS         top

       This manual page was written by Dan Walsh <>.
       The program was written by Karl MacMillan <>, Joshua Brindle <>

COLOPHON         top

       This page is part of the selinux (Security-Enhanced Linux user-
       space libraries and tools) project.  Information about the
       project can be found at 
       ⟨⟩.  If you have a
       bug report for this manual page, see
       This page was obtained from the project's upstream Git repository
       ⟨⟩ on 2023-12-22.  (At
       that time, the date of the most recent commit that was found in
       the repository was 2023-05-11.)  If you discover any rendering
       problems in this HTML version of the page, or you believe there
       is a better or more up-to-date source for the page, or you have
       corrections or improvements to the information in this COLOPHON
       (which is not part of the original manual page), send a mail to

Security Enhanced Linux         Nov 2005              SEMODULE_EXPAND(8)