---
name: "seusers"
section: "5"
platform: "linux"
package: "selinux-utils"
version: "3.8.1-1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/seusers"
---

# seusers(5)

The SELinux GNU/Linux user to SELinux user mapping configuration file

## NAME

seusers - The SELinux GNU/Linux user to SELinux user mapping configuration file

## DESCRIPTION

The *seusers* file contains a list GNU/Linux user to SELinux user mapping for use by SELinux-aware login applications such as [**PAM**(8)](/PAM/8.md).

[**selinux\_usersconf\_path**(3)](/selinux_usersconf_path/3.md)  will return the active policy path to this file. The default SELinux users mapping file is located at:

*/etc/selinux/{SELINUXTYPE}/seusers*

Where *{SELINUXTYPE}* is the entry from the selinux configuration file *config* (see [**selinux\_config**(5)](/selinux_config/5.md)).

[**getseuserbyname**(3)](/getseuserbyname/3.md) reads this file to map a GNU/Linux user or group to an SELinux user.

## FILE FORMAT

Each line of the *seusers* configuration file consists of the following:

\[**%***group\_id*\]\|\[*user\_id*\]**:***seuser\_id*\[**:***range*\]

Where:

*group\_id*\|*user\_id*

The  GNU/Linux user id, or if preceded by the percentage (**%**) symbol, then a GNU/Linux group id.\
 An optional entry set to **\_\_default\_\_** can be provided as a fall back if required.

*seuser\_id*

The SELinux  user identity.

*range*

The optional level or range for an MLS/MCS policy.

## EXAMPLE

\# ./seusers\
 system\_u:system\_u:s0-s15:c0.c255\
 root:root:s0-s15:c0.c255\
 fred:user\_u:s0\
 \_\_default\_\_:user\_u:s0\
 %user\_group:user\_u:s0

## SEE ALSO

[**selinux**(8)](/selinux/8.md), [**PAM**(8)](/PAM/8.md), [**selinux\_usersconf\_path**(3)](/selinux_usersconf_path/3.md), [**getseuserbyname**(3)](/getseuserbyname/3.md), [**selinux\_config**(5)](/selinux_config/5.md)