chcat(8)

chcat8

Change selinux security categories of files/users

Usage

chcat category file ...

chcat -l category user ...

chcat [[{+ | -}] category ...] file ...

chcat -l [[{+ | -}] category ...] user ...

chcat [-d] file ...

chcat -l [-d] user ...

chcat -L [-l] [user ...]

Overview

Use +/- to add/remove categories from a file or user (only a single category can be specified at a time). Or specify the desired list/range of categories to be applied (replacing the existing categories).

Note: When removing a category you must specify '--' on the command line before using the -Category syntax. This tells the command that you have finished entering options and are now specifying a category name instead.

-d

delete all categories from given FILE/USER.

-L

list available categories.

-l

Tells chcat to operate on users instead of files.

Examples

Replace categories of user "test" with c0.c6
# chcat -l c0.c6 test
Add category c1023 to user "test"
# chcat -l +c1023 test
Remove category c5 from file "file"
# chcat -- -c5 file
Remove all categories from file "file"
# chcat -d file

Files

/etc/selinux/{SELINUXTYPE}/setrans.conf
/etc/selinux/{SELINUXTYPE}/seusers

Releases

10 releases since Debian 4.0 (Etch); the text changed 4 times.

  1. 4.0
  2. 5.0–6.0
  3. 7
  4. 8–12
  5. 13

-L since Debian 5.0 (Lenny); -d since Debian 5.0 (Lenny); -l since Debian 5.0 (Lenny).

From policycoreutils-python-utils 3.8.1-2 in Debian 13 (Trixie). Parsed by carta from the page's man source.