Linux command
semanage-user 命令
安全
权限或系统影响较大，执行前请核对目标。
常用示例
List
sudo semanage user -l
Add
sudo semanage user -a -R "staff_r sysadm_r" newuser_u
Delete
sudo semanage user -d myuser_u
Modify
sudo semanage user -m -R "staff_r" myuser_u
Example
sudo semanage user -a -R "staff_r" -L s0 newuser_u
Example
sudo semanage user -a -R "staff_r" -r s0-s0:c0.c1023 newuser_u
Example
sudo semanage user -l -C
说明
semanage user manages SELinux user mappings that control what roles a user can assume. SELinux users are mapped to Linux users through semanage login.
参数
- -l, --list
- List all SELinux users
- -a, --add
- Add a new SELinux user
- -d, --delete
- Delete a SELinux user
- -m, --modify
- Modify an existing SELinux user
- -R, --roles ROLES
- Specify MLS/MCS roles for the user
- -L, --level LEVEL
- Specify default MLS/MCS level (default s0)
- -r, --range RANGE
- Specify MLS/MCS range for the user
- -C, --locallist
- List only local customizations
- -n, --noheading
- Suppress column headings in output
FAQ
What is the semanage-user command used for?
semanage user manages SELinux user mappings that control what roles a user can assume. SELinux users are mapped to Linux users through semanage login.
How do I run a basic semanage-user example?
Run `sudo semanage user -l` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does -l, --list do in semanage-user?
List all SELinux users