aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--checkpolicy/checkmodule.85
-rw-r--r--checkpolicy/checkmodule.c4
2 files changed, 6 insertions, 3 deletions
diff --git a/checkpolicy/checkmodule.8 b/checkpolicy/checkmodule.8
index 550b32be..a25f25c0 100644
--- a/checkpolicy/checkmodule.8
+++ b/checkpolicy/checkmodule.8
@@ -3,7 +3,7 @@
checkmodule \- SELinux policy module compiler
.SH SYNOPSIS
.B checkmodule
-.I "[-b] [-m] [-M] [-V] [-o output_file] [input_file]"
+.I "[-h] [-b] [-m] [-M] [-U handle_unknown ] [-V] [-o output_file] [input_file]"
.SH "DESCRIPTION"
This manual page describes the
.BR checkmodule
@@ -25,6 +25,9 @@ the module package into the module store and load the resulting policy.
Read an existing binary policy module file rather than a source policy
module file. This option is a development/debugging aid.
.TP
+.B \-h
+Print usage.
+.TP
.B \-m
Generate a non-base policy module.
.TP
diff --git a/checkpolicy/checkmodule.c b/checkpolicy/checkmodule.c
index ad5a3d4f..47603e02 100644
--- a/checkpolicy/checkmodule.c
+++ b/checkpolicy/checkmodule.c
@@ -139,13 +139,14 @@ static int write_binary_policy(policydb_t * p, char *file, char *progname)
static void usage(char *progname)
{
- printf("usage: %s [-V] [-b] [-U handle_unknown] [-m] [-M] [-o FILE] [INPUT]\n", progname);
+ printf("usage: %s [-h] [-V] [-b] [-U handle_unknown] [-m] [-M] [-o FILE] [INPUT]\n", progname);
printf("Build base and policy modules.\n");
printf("Options:\n");
printf(" INPUT build module from INPUT (else read from \"%s\")\n",
txtfile);
printf(" -V show policy versions created by this program\n");
printf(" -b treat input as a binary policy file\n");
+ printf(" -h print usage\n");
printf(" -U OPTION How to handle unknown classes and permissions\n");
printf(" deny: Deny unknown kernel checks\n");
printf(" reject: Reject loading of policy with unknowns\n");
@@ -169,7 +170,6 @@ int main(int argc, char **argv)
{"binary", no_argument, NULL, 'b'},
{"version", no_argument, NULL, 'V'},
{"handle-unknown", optional_argument, NULL, 'U'},
- {"debug", no_argument, NULL, 'd'},
{"mls", no_argument, NULL, 'M'},
{NULL, 0, NULL, 0}
};