sediff allows the user to inspect the semantic differences between two SELinux policy files.

-c, --classes

object class and permission definitions

-t, --types

type definitions

-a, --attributes

attribute definitions

-r, --roles

role definitions

-u, --users

user definitions

-b, --booleans

boolean definitions and default values

-T, --terules

type enforcement rules

-R, --roletrans

role transition rules

-A, --roleallows

role allow rules

-C, --conds

conditionals and their rules

-q, --quiet

only print different definitions

-s, --stats

print useful policy statics

-h, --help

display this help and exit

-v, --version

output version information and exit