NAME

chpkgcon - a tool to alter SELinux security context of a packaged program

SYNOPSIS

chpkgcon [ options ] RPMNAME LEVEL[:CAT]

DESCRIPTION

The chpkgcon tool tries to alter the SELinux security context of files and programs releatd to the given RPM file. In particular, it adjusts the context of files and directories under /var, /run and /etc owned by the package. It also overrides SELinuxContext= directive in all systemd(1) service unit files related to the package.

OPTIONS

-u USERCTX, --userctx=USERCTX

Set user context to USERCTX.

-o OBJCTX, --objctx=OBJCTX

Set object context to OBJCTX.

-n, --dry-run

Print operations but don't execute them.

-v, --verbose

Be verbose.

-V, --version

Print program version and exit.

-h, --help

Print brief help page and exit.

CONFIGURATION AND ENVIRONMENT

The following configuration options in /etc/chpkgcon.conf and also the corresponding environment variables are honored:

* SYSCONFDIR -- path to the system configuration directory (the

default is /etc);

* LOCALSTATEDIR -- path to the program data directory (the

default is /var);

* RUNSTATEDIR -- path to the program runtime state directory

(the default is /run);

* UNITDIR -- path to the systemd's unit directory (the

default is /usr/lib/systemd/system);

* USERCTX -- the user (process) context prefix (the

default is generic_u:generic_r:generic_t);

* OBJCTX -- the object (file) context prefix (the

default is generic_u:object_r:def_t).

BUGS

Report bugs to https://bugzilla.altlinux.org/.

COPYRIGHT

Copyright © Paul Wolneykien. License GPLv2+: GNU GPL version 2 or later See <http://gnu.org/licenses/gpl.html> for more information.
This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.

SEE ALSO

chcon(1).