semanage-user

Manage SELinux user definitions and roles

TLDR

List all SELinux users

$ sudo semanage user -l

Add a new SELinux user

$ sudo semanage user -a -R "staff_r sysadm_r" newuser_u

Delete a SELinux user

$ sudo semanage user -d myuser_u

Modify SELinux user roles

$ sudo semanage user -m -R "staff_r" myuser_u

Add user with default level

$ sudo semanage user -a -R "staff_r" -L s0 newuser_u

Add user with MLS range

$ sudo semanage user -a -R "staff_r" -r s0-s0:c0.c1023 newuser_u

List only customized users

$ sudo semanage user -l -C

SYNOPSIS

semanage user [options] [selinuxuser_]

DESCRIPTION

semanage user manages SELinux user mappings that control what roles a user can assume. SELinux users are mapped to Linux users through semanage login.

PARAMETERS

-l, --list

List all SELinux users

-a, --add

Add a new SELinux user

-d, --delete

Delete a SELinux user

-m, --modify

Modify an existing SELinux user

-R, --roles ROLES

Specify MLS/MCS roles for the user

-L, --level LEVEL

Specify default MLS/MCS level (default s0)

-r, --range RANGE

Specify MLS/MCS range for the user

-C, --locallist

List only local customizations

-n, --noheading

Suppress column headings in output

CAVEATS

Requires root privileges. Changes to SELinux user definitions affect what roles users can transition to. SELinux must be enabled for changes to take effect.

HISTORY

semanage user is part of policycoreutils, providing SELinux policy management tools for managing user contexts and role assignments.