NAME
seunshare - Run cmd with alternate homedir, tmpdir and/or SELinux context
SYNOPSIS
seunshare [ -v ] [ -C ] [ -k ] [ -t tmpdir ] [ -h homedir ] [ -Z context ] -- executable [args]
DESCRIPTION
Run the executable within the specified context, using the alternate home directory and /tmp directory. The seunshare command unshares from the default namespace, then mounts the specified homedir and tmpdir over the default homedir and /tmp. Finally it tells the kernel to execute the application under the specified SELinux context.
- -h homedir
-
Alternate homedir to be used by the application. Homedir must be owned by the user.
- -t tmpdir
-
Use alternate temporary directory to mount on /tmp. tmpdir must be owned by the user.
- -C --capabilities
-
Allow apps executed within the namespace to use capabilities. Default is no capabilities.
- -k --kill
-
Kill all processes with matching MCS level.
- -Z context
-
Use alternate SELinux context while running the executable.
- -v
-
Verbose output
SEE ALSO
- runcon(1), sandbox(8), selinux(8)
AUTHOR
This manual page was written by Dan Walsh <[email protected]> and Thomas Liu <[email protected]>