semanage-fcontext

List all file labeling rules

$ sudo semanage fcontext -l

$ sudo semanage fcontext -l -C -n

$ sudo semanage fcontext -a -t [samba_share_t] '/mnt/share(/.*)?'

$ sudo semanage fcontext -a -e /[path/to/ref] /[path/to/target]

$ sudo semanage fcontext -d '/mnt/share(/.*)?'

semanage fcontext [-l|-a|-d|-m] [options] filespec_

semanage fcontext manages persistent file context labeling rules in SELinux. File contexts determine what SELinux type label files receive, which controls what confined domains can access them.
Rules use PCRE regular expressions to match file paths. After adding or modifying rules, run restorecon on the affected directories to apply the new labels.

-l, --list

List all file context rules

Add a new file context rule

Delete a file context rule

Modify an existing rule

SELinux type to assign to matching files

Create equivalency rule from reference path

Show only locally customized rules

Omit column headings from output

Requires root privileges. Rules are persistent but not applied automatically; use restorecon -Rv to apply. Equivalency rules (-e) are useful when a directory should have the same contexts as a reference path.

semanage(8), restorecon(8), matchpathcon(8), chcon(1)