restorecond(8)

restorecond8

Daemon that watches for file creation and then sets the default selinux file context

Usage

restorecond [-d] [-h] [-f restorecond_file] [-u] [-v]

Overview

This manual page describes the restorecond program.

This daemon uses inotify to watch files listed in the /etc/selinux/restorecond.conf, when they are created, this daemon will make sure they have the correct file context associated with the policy.

Options

-d

Turns on debugging mode. Application will stay in the foreground and lots of debugs messages start printing.

-h

Print usage statement.

-f restorecond_file

Use alternative restorecond.conf file.

-u

Turns on user mode. Runs restorecond in the user session and reads /etc/selinux/restorecond_user.conf. Uses dbus to make sure only one restorecond is running per user session.

-v

Turns on verbose debugging. (Report missing files)

Files

/etc/selinux/restorecond.conf /etc/selinux/restorecond_user.conf

Releases

9 releases since Debian 5.0 (Lenny); the text changed 2 times.

  1. 5.0–6.0
  2. 7
  3. 8–13

-f since Debian 7 (Wheezy); -h since Debian 8 (Jessie); -u since Debian 7 (Wheezy); -v since Debian 7 (Wheezy).

Author

This man page and program was written by Dan Walsh <[email protected]>.

From restorecond 3.8.1-1 in Debian 13 (Trixie). Parsed by carta from the page's man source.