Man page - seusers(5)
Packages contains this manual
- selabel_db(5)
- x_contexts(5)
- selabel_media(5)
- matchpathcon(8)
- selabel_x(5)
- getsebool(8)
- file_contexts.subs_dist(5)
- sepgsql_contexts(5)
- media(5)
- setenforce(8)
- default_contexts(5)
- failsafe_context(5)
- avcstat(8)
- file_contexts.local(5)
- seusers(5)
- file_contexts(5)
- service_seusers(5)
- customizable_types(5)
- user_contexts(5)
- getenforce(8)
- sefcontext_compile(8)
- selabel_file(5)
- selinux(8)
- togglesebool(8)
- file_contexts.homedirs(5)
- selinuxenabled(8)
- virtual_image_context(5)
- selinuxexeccon(8)
- virtual_domain_context(5)
- default_type(5)
- securetty_types(5)
- removable_context(5)
- file_contexts.subs(5)
- booleans(8)
- secolor.conf(5)
apt-get install selinux-utils
Manual
seusers
NAMEDESCRIPTION
FILE FORMAT
EXAMPLE
SEE ALSO
NAME
seusers - The SELinux GNU/Linux user to SELinux user mapping configuration file
DESCRIPTION
The seusers file contains a list GNU/Linux user to SELinux user mapping for use by SELinux-aware login applications such as PAM (8).
selinux_usersconf_path (3) will return the active policy path to this file. The default SELinux users mapping file is located at:
/etc/selinux/{SELINUXTYPE}/seusers
Where {SELINUXTYPE} is the entry from the selinux configuration file config (see selinux_config (5)).
getseuserbyname (3) reads this file to map a GNU/Linux user or group to an SELinux user.
FILE FORMAT
Each line of the seusers configuration file consists of the following:
[ % group_id ]|[ user_id ] : seuser_id [ : range ]
Where:
group_id | user_id
The GNU/Linux user id, or if
preceded by the percentage (
%
) symbol, then a
GNU/Linux group id.
An optional entry set to
__default__
can be provided
as a fall back if required.
seuser_id
The SELinux user identity.
range
The optional level or range for an MLS/MCS policy.
EXAMPLE
# ./seusers
system_u:system_u:s0-s15:c0.c255
root:root:s0-s15:c0.c255
fred:user_u:s0
__default__:user_u:s0
%user_group:user_u:s0
SEE ALSO
selinux (8), PAM (8), selinux_usersconf_path (3), getseuserbyname (3), selinux_config (5)