runcon(1)

runcon1

Run command with specified security context

Usage

runcon CONTEXT COMMAND [args]

runcon [-c] [-u USER] [-r ROLE] [-t TYPE] [-l RANGE] COMMAND [args]

Overview

Run COMMAND with completely-specified CONTEXT, or with current or transitioned security context modified by one or more of LEVEL, ROLE, TYPE, and USER.

If none of -c, -t, -u, -r, or -l, is specified, the first argument is used as the complete context. Any additional arguments after COMMAND are interpreted as arguments to the command.

Only carefully-chosen contexts are likely to run successfully.

Run a program in a different SELinux security context. With neither CONTEXT nor COMMAND, print the current security context.

Mandatory arguments to long options are mandatory for short options too.

CONTEXT

Complete security context

-c, --compute

compute process transition context before modifying

-t, --type=TYPE

type (for same role as parent)

-u, --user=USER

user identity

-r, --role=ROLE

role

-l, --range=RANGE

levelrange

--help

display this help and exit

--version

output version information and exit

Exit status:

125

if the runcon command itself fails

126

if COMMAND is found but cannot be invoked

127

if COMMAND cannot be found

-

the exit status of COMMAND otherwise

Releases

10 releases since Debian 4.0 (Etch); the text changed 9 times.

  1. 4.0
  2. 5.0
  3. 6.0
  4. 7
  5. 8
  6. 9
  7. 10
  8. 11
  9. 12
  10. 13

--compute since Debian 5.0 (Lenny); --help since Debian 5.0 (Lenny); --range since Debian 5.0 (Lenny); --role since Debian 5.0 (Lenny); --type since Debian 5.0 (Lenny); --user since Debian 5.0 (Lenny); --version since Debian 5.0 (Lenny).

Author

Written by Russell Coker.

Reporting bugs

GNU coreutils online help: <https://www.gnu.org/software/coreutils/>
Report any translation bugs to <https://translationproject.org/team/>

From coreutils 9.7-3 in Debian 13 (Trixie). Parsed by carta from the page's man source.