semanage-login(8) semanage-login(8)

# [NAME](#NAME)

**semanage-login - SELinux Policy Management linux user to SELinux User mapping tool**

# [SYNOPSIS](#SYNOPSIS)

**semanage login \[-h] \[-n] \[-N] \[-S STORE] \[ --add -s SEUSER -r RANGE LOGIN | --delete LOGIN | --deleteall | --extract | --list \[-C] | --modify -s SEUSER -r RANGE LOGIN ]**

# [DESCRIPTION](#DESCRIPTION)

semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources. **semanage login** controls the mapping between a Linux User and the SELinux User. It can be used to turn on confined users. For example you could define that a particular user or group of users will login to a system as the user\_u user. Prefix the group name with a '%' sign to indicate a group name.

# [OPTIONS](#OPTIONS)

[*-h, --help*](#h,)

Show this help message and exit

[*-n, --noheading*](#n,)

Do not print heading when listing the specified object type

[*-N, --noreload*](#N,)

Do not reload policy after commit

[*-C, --locallist*](#C,)

List local customizations

[*-S STORE, --store STORE*](#S)

Select an alternate SELinux Policy Store to manage

[*-a, --add*](#a,)

Add a record of the specified object type

[*-d, --delete*](#d,)

Delete a record of the specified object type

[*-m, --modify*](#m,)

Modify a record of the specified object type

[*-l, --list*](#l,)

List records of the specified object type

[*-E, --extract*](#E,)

Extract customizable commands, for use within a transaction

[*-D, --deleteall*](#D,)

Remove all local customizations

[*-s SEUSER, --seuser SEUSER*](#s)

SELinux user name

[*-r RANGE, --range RANGE*](#r)

MLS/MCS Security Range (MLS/MCS Systems only) SELinux Range for SELinux login mapping defaults to the SELinux user record range. SELinux Range for SELinux user defaults to s0.

# [EXAMPLE](#EXAMPLE)

```
Set the default SELinux user on the system to guest_u
# semanage login -m -s guest_u __default__
Map user gijoe to SELinux user staff_u and assign MLS range SystemLow-Secret
# semanage login -a -s staff_u -rSystemLow-Secret gijoe
Map all users in the engineering group to SELinux user staff_u
# semanage login -a -s staff_u %engineering
```

# [SEE ALSO](#SEE_ALSO)

[**selinux**(8)](/man/enterprise-packages/py3-sepolgen/selinux.8), [**semanage**(8)](/man/enterprise-packages/py3-sepolgen/semanage.8), [**semanage-user**(8)](/man/enterprise-packages/py3-sepolgen/semanage-user.8)

# [AUTHOR](#AUTHOR)

This man page was written by Daniel Walsh <dwalsh@redhat.com>

20130617

---

Document: semanage-login(8) from py3-sepolgen 3.11-r1 (Chainguard OS)
Source: https://github.com/SELinuxProject/selinux.git