---
name: "service_seusers"
section: "5"
platform: "linux"
package: "selinux-utils"
version: "3.8.1-1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/service_seusers"
---

# service\_seusers(5)

The SELinux GNU/Linux user and service to SELinux user mapping configuration files

## NAME

service\_seusers - The SELinux GNU/Linux user and service to SELinux user mapping configuration files

## DESCRIPTION

These are optional files that allow services to define an SELinux user when authenticating via SELinux-aware login applications such as [**PAM**(8)](/PAM/8.md).

There is one file for each GNU/Linux user name that will be required to run a service with a specific SELinux user name.

The path for each configuration file is formed by the path returned by [**selinux\_policy\_root**(3)](/selinux_policy_root/3.md) with   */logins/username* appended (where *username* is a file representing the GNU/Linux user name). The default services directory is located at:

*/etc/selinux/{SELINUXTYPE}/logins*

Where *{SELINUXTYPE}* is the entry from the selinux configuration file *config* (see [**selinux\_config**(5)](/selinux_config/5.md)).

**getseuser**(3) reads this file to map services to an SELinux user.

## FILE FORMAT

Each line within the *username* file is formatted as follows with each component separated by a colon:

*service***:***seuser***\[:*range*\]**

Where:

*service*

The service name used by the application.

*seuser*

The SELinux user name.

*range*

The range for MCS/MLS policies.

## EXAMPLES

Example 1 - for the 'root' user:

\# ./logins/root\
 ipa:user\_u:s0\
 this\_service:unconfined\_u:s0

Example 2 - for GNU/Linux user 'rch':

\# ./logins/rch\
 ipa:unconfined\_u:s0\
 that\_service:unconfined\_u:s0

## SEE ALSO

[**selinux**(8)](/selinux/8.md), [**PAM**(8)](/PAM/8.md), [**selinux\_policy\_root**(3)](/selinux_policy_root/3.md), **getseuser**(3), [**selinux\_config**(5)](/selinux_config/5.md)