SIMPLE SOLUTIONS

LOCAL.USERS(5) - man page online | file formats

The SELinux local users configuration file.

Chapter
28-Nov-2011
local.users(5)                        SELinux configuration                        local.users(5)

NAME

local.users - The SELinux local users configuration file

DESCRIPTION

The file contains local user definitions in the form of policy language user statements and is only found on older SELinux systems as it has been deprecated and replaced by the semange(8) services. This file is only read by selinux_mkload_policy(3) when SETLOCALDEFS in the SELinux config file (see selinux_config(5)) is set to 1. selinux_users_path(3) will return the active policy path to the directory where this file is located. The default local users file is: /etc/selinux/{SELINUXTYPE}/contexts/users/local.users Where {SELINUXTYPE} is the entry from the selinux configuration file config (see selinux_config(5)).

FILE FORMAT

The file consists of one or more entries terminated with ';', each on a separate line as follows: user seuser_id roles role_id [[level level] [range range]]; Where: user The user keyword. seuser_id The SELinux user identifier. roles The roles keyword. role_id One or more previously declared role identifiers. Multiple role identifiers consist of a space separated list enclosed in braces '{}'. level If MLS/MCS is configured, the level keyword. level The users default security level. Note that only the sensitivity component of the level (e.g. s0) is required. range If MLS/MCS is configured, the range keyword. range The current and clearance levels that the user can run. These are separated by a hyphen '-' as shown in the EXAMPLE section.

EXAMPLE

# ./users/local.users user test_u roles staff_r level s0 range s0 - s15:c0.c1023;

SEE ALSO

selinux(8), semanage(8), selinux_users_path(3), selinux_config(5), selinux_mkload_policy(3)
Security Enhanced Linux 28-Nov-2011 local.users(5)
This manual Reference Other manuals
local.users(5) referred by booleans(5) | selinux_config(5)
refer to security_load_policy(3) | selinux(8) | selinux_config(5) | semanage(8)