genhomedircon(8)

genhomedircon8

Generate selinux file context configuration entries for user home directories

Overview

genhomedircon is a script that executes semodule to rebuild the currently active SELinux policy (without reloading it) and to create the labels for each user home directory based on directory paths returned by calls to getpwent().

The latter functionality depends on the "usepasswd" parameter being set to "true" (default) in /etc/selinux/semanage.conf.

This script is usually executed by semanage although this default behavior can be optionally modified by setting to "true" the "disable-genhomedircon" in /etc/selinux/semanage.conf.

Directories can be excluded from the list of home directories by the setting "ignoredirs" in /etc/selinux/semanage.conf.

Releases

9 releases since Debian 3.1 (Sarge); the text changed 3 times.

  1. 3.1–4.0
  2. 7
  3. 8–10
  4. 11–13

--nopasswd until Debian 4.0 (Etch); -h until Debian 4.0 (Etch); -n until Debian 4.0 (Etch).

Author

This manual page was written by Dan Walsh <[email protected]>

From policycoreutils 3.8.1-2 in Debian 13 (Trixie). Parsed by carta from the page's man source.