secilcheck - Man Page

invoke the CIL neverallow checker

Synopsis

secilcheck [OPTION...] binary file...

Description

secilcheck invokes the CIL neverallow checker with specified arguments.

Options

-Q,  --qualified-names

Allow names containing dots (qualified names). Blocks, blockinherits, blockabstracts, and in-statements will not be allowed.

-m,  --multiple-decls

Allow some statements to be re-declared.

-v,  --verbose

Increment verbosity level.

-h,  --help

Display usage information.

See Also

secilc(8), secil2tree(8), secil2conf(8)

HTML documentation describing the CIL language statements is available starting with docs/html/index.html.

PDF documentation describing the CIL language statements is available at: docs/pdf/CIL_Reference_Guide.pdf.

Author

James Carter

Info

07/17/2026 Check binary policy file again