chcat - Man Page
change SELinux security categories of files/users
Synopsis
chcat category file...
chcat -l category user...
chcat [[+|-]category...] file...
chcat -l [[+|-]category...] user...
chcat [-d] file...
chcat -l [-d] user...
chcat -L [ -l ] [ user ... ]
Description
Use +/- to add/remove categories from a file or user (only a single category can be specified at a time). Or specify the desired list/range of categories to be applied (replacing the existing categories).
Note: When removing a category you must specify '--' on the command line before using the -Category syntax. This tells the command that you have finished entering options and are now specifying a category name instead.
- -d
delete all categories from given FILE/USER.
- -L
list available categories.
- -l
Tells chcat to operate on users instead of files.
Example
Replace categories of user "test" with c0.c6 # chcat -l c0.c6 test Add category c1023 to user "test" # chcat -l +c1023 test Remove category c5 from file "file" # chcat -- -c5 file Remove all categories from file "file" # chcat -d file
See Also
chcon(1), selinux(8), semanage(8)
When operating on files this script wraps the chcon command.
Files
/etc/selinux/{SELINUXTYPE}/setrans.conf
/etc/selinux/{SELINUXTYPE}/seusers