Section 8 · System administration

chcat.8

Package: policycoreutils-python-utils

On this page

CHCAT

NAME
SYNOPSIS
DESCRIPTION
EXAMPLE
SEE ALSO
FILES


NAME

chcat − change SELinux security categories of files/users

SYNOPSIS

chcat category file… **
chcat -l** category user… **
chcat** [[+|-]category…] file… **
chcat -l** [[+|-]category…] user… **
chcat** [-d] file… **
chcat -l** [-d] user… **
chcat** -L [ −l ] [ user … ]

DESCRIPTION

Use +/- to add/remove categories from a file or user (only a single category can be specified at a time). Or specify the desired list/range of categories to be applied (replacing the existing categories).

Note: When removing a category you must specify ’−−’ on the command line before using the −Category syntax. This tells the command that you have finished entering options and are now specifying a category name instead.

−ddelete all categories from given FILE/USER.
−Llist available categories.
−lTells chcat to operate on users instead of files.

EXAMPLE

Replace categories of user “test” with c0.c6

chcat -l c0.c6 test

Add category c1023 to user “test”

chcat -l +c1023 test

Remove category c5 from file “file”

chcat — -c5 file

Remove all categories from file “file”

chcat -d file

SEE ALSO

chcon(1), selinux(8), semanage(8)

When operating on files this script wraps the chcon command.

FILES

/etc/selinux/{SELINUXTYPE}/setrans.conf
/etc/selinux/{SELINUXTYPE}/seusers