semanage-login - SELinux Policy Management linux user to SELinux User mapping tool

       This man page was written by Daniel Walsh <dwalsh@redhat.com>

                                                    20130617                                   semanage-login(8)

       semanage is used to configure certain elements of SELinux policy without  requiring  modification  to  or
       recompilation  from  policy  sources.   semanagelogin controls the mapping between a Linux User and the
       SELinux User. It can be used to turn on confined users. For example you could define  that  a  particular
       user  or  group of users will login to a system as the user_u user. Prefix the group name with a '%' sign
       to indicate a group name.

       Set the default SELinux user on the system to guest_u
       # semanage login -m -s guest_u __default__
       Map user gijoe to SELinux user staff_u and assign MLS range SystemLow-Secret
       # semanage login -a -s staff_u -rSystemLow-Secret gijoe
       Map all users in the engineering group to SELinux user staff_u
       # semanage login -a -s staff_u %engineering

semanage-login-SELinuxPolicyManagementlinuxusertoSELinuxUsermappingtool

-h,--help
              Show this help message and exit

       -n,--noheading
              Do not print heading when listing the specified object type

       -N,--noreload
              Do not reload policy after commit

       -C,--locallist
              List local customizations

       -SSTORE,--storeSTORE
              Select an alternate SELinux Policy Store to manage

       -a,--add
              Add a record of the specified object type

       -d,--delete
              Delete a record of the specified object type

       -m,--modify
              Modify a record of the specified object type

       -l,--list
              List records of the specified object type

       -E,--extract
              Extract customizable commands, for use within a transaction

       -D,--deleteall
              Remove all local customizations

       -sSEUSER,--seuserSEUSER
              SELinux user name

       -rRANGE,--rangeRANGE
              MLS/MCS Security Range (MLS/MCS Systems only) SELinux Range for SELinux login mapping defaults  to
              the SELinux user record range. SELinux Range for SELinux user defaults to s0.

selinux(8), semanage(8), semanage-user(8)

semanagelogin[-h][-n][-N][-SSTORE][--add-sSEUSER-rRANGELOGIN|--deleteLOGIN|--deleteall|--extract|--list[-C]|--modify-sSEUSER-rRANGELOGIN]