semanage-user(8) semanage-user(8)

# [NAME](#NAME)

**semanage-user - SELinux Policy Management SELinux User mapping tool**

# [SYNOPSIS](#SYNOPSIS)

**semanage user \[-h] \[-n] \[-N] \[-S STORE] \[ --add ( -L LEVEL -R ROLES -r RANGE SEUSER) | --delete SEUSER | --deleteall | --extract | --list \[-C] | --modify ( -L LEVEL -R ROLES -r RANGE SEUSER ) ]**

# [DESCRIPTION](#DESCRIPTION)

semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources. **semanage user** controls the mapping between an SELinux User and the roles and MLS/MCS levels.

# [OPTIONS](#OPTIONS)

[*-h, --help*](#h,)

Show this help message and exit

[*-n, --noheading*](#n,)

Do not print heading when listing the specified object type

[*-N, --noreload*](#N,)

Do not reload policy after commit

[*-S STORE, --store STORE*](#S)

Select an alternate SELinux Policy Store to manage

[*-C, --locallist*](#C,)

List local customizations

[*-a, --add*](#a,)

Add a record of the specified object type

[*-d, --delete*](#d,)

Delete a record of the specified object type

[*-m, --modify*](#m,)

Modify a record of the specified object type

[*-l, --list*](#l,)

List records of the specified object type

[*-E, --extract*](#E,)

Extract customizable commands, for use within a transaction

[*-D, --deleteall*](#D,)

Remove all local customizations

[*-L LEVEL, --level LEVEL*](#L)

Default SELinux Level for SELinux user, s0 Default. (MLS/MCS Systems only)

[*-r RANGE, --range RANGE*](#r)

MLS/MCS Security Range (MLS/MCS Systems only) SELinux Range for SELinux login mapping defaults to the SELinux user record range. SELinux Range for SELinux user defaults to s0.

[*-R \[ROLES\], --roles \[ROLES\]*](#R)

SELinux Roles. You must enclose multiple roles within quotes, separate by spaces. Or specify -R multiple times.

# [EXAMPLE](#EXAMPLE)

```
List SELinux users
# semanage user -l
Modify groups for staff_u user
# semanage user -m -R "system_r unconfined_r staff_r" staff_u
Assign user topsecret_u role staff_r and range s0-TopSecret
# semanage user -a -R "staff_r" -rs0-TopSecret topsecret_u
```

# [SEE ALSO](#SEE_ALSO)

[**selinux**(8)](/man/enterprise-packages/py3-sepolgen/selinux.8), [**semanage**(8)](/man/enterprise-packages/py3-sepolgen/semanage.8), [**semanage-login**(8)](/man/enterprise-packages/py3-sepolgen/semanage-login.8)

# [AUTHOR](#AUTHOR)

This man page was written by Daniel Walsh <dwalsh@redhat.com>

20130617

---

Document: semanage-user(8) from py3-sepolgen 3.11-r1 (Chainguard OS)
Source: https://github.com/SELinuxProject/selinux.git