Checking and Loading Policy Rules

If rules have been added or changed, you must check for consistency with the compiled rule set that fapolicyd uses and load them into fapolicyd.

  1. Check for inconsistencies between the rules in /etc/fapolicyd/rules.d and the compiled rules in /etc/fapolicyd/compiled.rules.
    sudo fagenrules --check

    If the rules in /etc/fapolicyd/rules.d have been updated and need to be recompiled and loaded, the output appears as follows:

    /sbin/fagenrules: Rules have changed and should be updated
  2. To compile the rules in /etc/fapolicyd/rules.d and load them into fapolicyd, run:
    sudo fagenrules --load

    You don't need to restart fapolicyd for the changes to take effect.

  3. List the rules to verify that the changes have been loaded correctly into fapolicyd.
    sudo fapolicyd-cli  -l