FileLabelRecipe - Revision history

Jaxelson: added category

2010-08-31T18:28:28Z

added category

←Older revision		Revision as of 18:28, 31 August 2010
Line 10:		Line 10:
	# ls -Z /path/to/myfile		# ls -Z /path/to/myfile
	system_u:object_r:myfile_t /path/to/myfile		system_u:object_r:myfile_t /path/to/myfile
		+
		+	[[Category:Recipes]]

MurrayMcAllister: text review

2009-11-25T10:19:35Z

text review

←Older revision		Revision as of 10:19, 25 November 2009
Line 1:		Line 1:
-	~~If you want to~~ change the context of a file ~~the ''chcon'' program can do this. However~~, changes made ~~this way will~~ not preserved if the file is relabeled ~~by using ''~~restorecon'' or ~~using~~ the ''/.autorelabel~~'' file~~ and rebooting. The ''semanage'' program ~~is used to~~ make customizations to the SELinux policy configuration.	+	The chcon program can change the context of a file; however, changes made with chcon are not preserved if the file is relabeled with restorecon, or if the entire file system is relabeled using "touch /.autorelabel" and then rebooting. The semanage program can make persistent customizations to the SELinux policy configuration.

-	~~For example~~, if you ~~want~~ to set the ~~file '''~~/path/to/myfile~~''' to have the type '''myfile_t''', the following semanage command can be run~~:	+	To run semanage, you must be the Linux root user and in a role allowed to run semanage, such as sysadm_r or unconfined_r. The following example uses semanage to set the myfile_t type for the "/path/to/myfile" file:

	# semanage fcontext -a -t myfile_t /path/to/myfile		# semanage fcontext -a -t myfile_t /path/to/myfile

-	~~You must be the root Linux user and in a role allowed to run~~ semanage~~, such as ''sysadm_r'' or ''unconfined_r''.~~	+	This semanage command adds an entry in the system file contexts. This entry will be persistent, even after the distribution policy is updated. If you change policies, for example, from targeted to MLS, you must re-run the above command to add the entry to the new policy. Run the restorecon command to apply the changes added via "semanage fcontext":
-		+
-	~~This will add~~ an entry in the system file contexts. This entry will be persistent, even ~~when~~ the distribution policy is updated. ~~However, if~~ you change policies, ~~e.g.~~ from targeted to ~~mls~~, you ~~will have to~~ re-run the above command to add it to the new policy. ~~This can be tested by running~~ the ''restorecon'' command ~~and examining~~ the ~~file's context afterward~~:	+

	# restorecon /path/to/myfile		# restorecon /path/to/myfile
	# ls -Z /path/to/myfile		# ls -Z /path/to/myfile
	system_u:object_r:myfile_t /path/to/myfile		system_u:object_r:myfile_t /path/to/myfile

JoshuaBrindle at 18:37, 19 November 2009

2009-11-19T18:37:43Z

←Older revision		Revision as of 18:37, 19 November 2009
Line 1:		Line 1:
-	If you want to change the context of a file the ''chcon'' program. However, changes made this way will not preserved if the file is relabeled by using ''restorecon'' or using the /.autorelabel file and rebooting. The ''semanage'' program is used to make customizations to the SELinux policy configuration.	+	If you want to change the context of a file the ''chcon'' program can do this. However, changes made this way will not preserved if the file is relabeled by using ''restorecon'' or using the ''/.autorelabel'' file and rebooting. The ''semanage'' program is used to make customizations to the SELinux policy configuration.

	For example, if you want to set the file '''/path/to/myfile''' to have the type '''myfile_t''', the following semanage command can be run:		For example, if you want to set the file '''/path/to/myfile''' to have the type '''myfile_t''', the following semanage command can be run:
Line 5:		Line 5:
	# semanage fcontext -a -t myfile_t /path/to/myfile		# semanage fcontext -a -t myfile_t /path/to/myfile

-	You must be the root Linux user and in a role allowed to run semanage, such as sysadm_r or unconfined_r.	+	You must be the root Linux user and in a role allowed to run semanage, such as ''sysadm_r'' or ''unconfined_r''.

	This will add an entry in the system file contexts. This entry will be persistent, even when the distribution policy is updated. However, if you change policies, e.g. from targeted to mls, you will have to re-run the above command to add it to the new policy. This can be tested by running the ''restorecon'' command and examining the file's context afterward:		This will add an entry in the system file contexts. This entry will be persistent, even when the distribution policy is updated. However, if you change policies, e.g. from targeted to mls, you will have to re-run the above command to add it to the new policy. This can be tested by running the ''restorecon'' command and examining the file's context afterward:

ChrisPeBenito at 15:05, 27 October 2009

2009-10-27T15:05:27Z

←Older revision		Revision as of 15:05, 27 October 2009
Line 1:		Line 1:
-	If you want to change the context of a file the ''chcon'' program. However, changes made this way will not preserved if the file is relabeled by using ''restorecon'' or using the /.autorelabel file and rebooting.	+	If you want to change the context of a file the ''chcon'' program. However, changes made this way will not preserved if the file is relabeled by using ''restorecon'' or using the /.autorelabel file and rebooting. The ''semanage'' program is used to make customizations to the SELinux policy configuration.
		+
		+	For example, if you want to set the file '''/path/to/myfile''' to have the type '''myfile_t''', the following semanage command can be run:

	# semanage fcontext -a -t myfile_t /path/to/myfile		# semanage fcontext -a -t myfile_t /path/to/myfile

-	This will add an entry in the system file contexts. This entry will be persistent, even when the distribution policy is updated. However, if you change policies, e.g. from targeted to mls, you will have to re-run the above command to add it to the new policy.	+	You must be the root Linux user and in a role allowed to run semanage, such as sysadm_r or unconfined_r.
		+
		+	This will add an entry in the system file contexts. This entry will be persistent, even when the distribution policy is updated. However, if you change policies, e.g. from targeted to mls, you will have to re-run the above command to add it to the new policy. This can be tested by running the ''restorecon'' command and examining the file's context afterward:
		+
		+	# restorecon /path/to/myfile
		+	# ls -Z /path/to/myfile
		+	system_u:object_r:myfile_t /path/to/myfile

ChrisPeBenito: New page: If you want to change the context of a file the ''chcon'' program. However, changes made this way will not preserved if the file is relabeled by using ''restorecon'' or using the /.autore...

2009-10-27T14:52:08Z

New page: If you want to change the context of a file the ''chcon'' program. However, changes made this way will not preserved if the file is relabeled by using ''restorecon'' or using the /.autore...

New page

If you want to change the context of a file the ''chcon'' program. However, changes made this way will not preserved if the file is relabeled by using ''restorecon'' or using the /.autorelabel file and rebooting.

# semanage fcontext -a -t myfile_t /path/to/myfile

This will add an entry in the system file contexts. This entry will be persistent, even when the distribution policy is updated. However, if you change policies, e.g. from targeted to mls, you will have to re-run the above command to add it to the new policy.