<commit_before>.TH sediff 1
.SH NAME
sediff \- SELinux policy difference tool
.SH SYNOPSIS
.B sediff
[OPTIONS] [EXPRESSION] ORIGINAL_POLICY ; MODIFIED_POLICY
.SH DESCRIPTION
.PP
.B sediff
allows the user to inspect the semantic differences between two SELinux policies.
.SH POLICY
.PP
.B
sediff
supports loading SELinux policies in one of four formats.
.IP "source"
A single text file containing policy source for versions 12 through 21. This file is usually named policy.conf.
.IP "binary"
A single file containing a monolithic kernel binary policy for versions 15 through 21. This file is usually named by version - for example, policy.20.
.IP "modular"
A list of policy packages each containing a loadable policy module. The first module listed must be a base module.
.IP "policy list"
A single text file containing all the information needed to load a policy, usually exported by SETools graphical utilities.
.PP
Policies do not need to be the same format. If not provided
.B
sediff
will print an error message and exit.
.SH EXPRESSIONS
.P
The user may specify an expression listing the policy elements to differentiate.
If not provided, all supported policy elements sans neverallows are examined.
.IP "-c, --class"
Find differences in permissions assigned to object classes and common permission sets.
.IP "--level"
Find differences in categories authorized for MLS levels.
.IP "--category"
Find differences in category definitions.
.IP "-t, --type"
Find differences in attributes associated with types.
.IP "-a, --attribute"
Find differences in types assigned to attributes.
.IP "-r, --role"
Find differences in types authorized for roles.
.IP "-u, --user"
Find differences in roles authorized for users.
.IP "-b, --bool"
Find differences in the default values of booleans.
.IP "-A, --allow"
Find differences in allow rules.
.IP "--auditallow"
Find differences in auditallow rules.
.IP "--dontaudit"
Find differences in dontaudit rules.
.IP "--neverallow"
Find differences in neverallow rules.
.IP "--type_trans"
Find differences in type_transition rules.
.IP "--type_member"
Find differences in type_member rules.
.IP "--type_change"
Find differences in type_change rules.
.IP "--role_trans"
Find differences in role_transition rules.
This includes differences in the default role.
.IP "--role_allows"
Find differences in role allow rules.
.IP "--range_trans"<commit_msg>Fix typo in sediff man page (<NAME>).<commit_after>.TH sediff 1
.SH NAME
sediff \- SELinux policy difference tool
.SH SYNOPSIS
.B sediff
[OPTIONS] [EXPRESSION] ORIGINAL_POLICY ; MODIFIED_POLICY
.SH DESCRIPTION
.PP
.B sediff
allows the user to inspect the semantic differences between two SELinux policies.
.SH POLICY
.PP
.B
sediff
supports loading SELinux policies in one of four formats.
.IP "source"
A single text file containing policy source for versions 12 through 21. This file is usually named policy.conf.
.IP "binary"
A single file containing a monolithic kernel binary policy for versions 15 through 21. This file is usually named by version - for example, policy.20.
.IP "modular"
A list of policy packages each containing a loadable policy module. The first module listed must be a base module.
.IP "policy list"
A single text file containing all the information needed to load a policy, usually exported by SETools graphical utilities.
.PP
Policies do not need to be the same format. If not provided
.B
sediff
will print an error message and exit.
.SH EXPRESSIONS
.P
The user may specify an expression listing the policy elements to differentiate.
If not provided, all supported policy elements sans neverallows are examined.
.IP "-c, --class"
Find differences in permissions assigned to object classes and common permission sets.
.IP "--level"
Find differences in categories authorized for MLS levels.
.IP "--category"
Find differences in category definitions.
.IP "-t, --type"
Find differences in attributes associated with types.
.IP "-a, --attribute"
Find differences in types assigned to attributes.
.IP "-r, --role"
Find differences in types authorized for roles.
.IP "-u, --user"
Find differences in roles authorized for users.
.IP "-b, --bool"
Find differences in the default values of booleans.
.IP "-A, --allow"
Find differences in allow rules.
.IP "--auditallow"
Find differences in auditallow rules.
.IP "--dontaudit"
Find differences in dontaudit rules.
.IP "--neverallow"
Find differences in neverallow rules.
.IP "--type_trans"
Find differences in type_transition rules.
.IP "--type_member"
Find differences in type_member rules.
.IP "--type_change"
Find differences in type_change rules.
.IP "--role_trans"
Find differences in role_transition rules.
This includes differences in the default role.
.IP "--role_allow"
Find differences in role allow rules.
.IP "--range_trans"
{'fraction_non_alphanumeric': 0.07508889353691696, 'fraction_numerical': 0.004601547793348672, 'mean_word_length': 4.141935483870967, 'pattern_counts': {'":': 0, '<': 4, '<?xml version=': 0, '>': 4, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '1941845', 'n_tokens_mistral': 1336, 'n_tokens_neox': 1274, 'n_words': 693}