failsafe\_context(5) SELinux configuration failsafe\_context(5)

# [NAME](#NAME)

failsafe\_context - The SELinux fail safe context configuration file

# [DESCRIPTION](#DESCRIPTION)

The *failsafe\_context* file allows SELinux-aware applications such as [**PAM**(8)](/man/os/libselinux/PAM.8) to obtain a known valid login context for an administrator if no valid default entries can be found elsewhere.

[**selinux\_failsafe\_context\_path**(3)](/man/os/libselinux/selinux_failsafe_context_path.3) will return the active policy path to this file. The default failsafe context file is:

*/etc/selinux/{SELINUXTYPE}/contexts/failsafe\_context*

Where *{SELINUXTYPE}* is the entry from the selinux configuration file *config* (see [**selinux\_config**(5)](/man/os/libselinux/selinux_config.5)).

The following functions read this file from the active policy path if they cannot obtain a default context:

[**get\_default\_context**(3)](/man/os/libselinux/get_default_context.3)  
[**get\_ordered\_context\_list**(3)](/man/os/libselinux/get_ordered_context_list.3)  
[**get\_ordered\_context\_list\_with\_level**(3)](/man/os/libselinux/get_ordered_context_list_with_level.3)  
[**get\_default\_context\_with\_level**(3)](/man/os/libselinux/get_default_context_with_level.3)  
[**get\_default\_context\_with\_role**(3)](/man/os/libselinux/get_default_context_with_role.3)  
[**get\_default\_context\_with\_rolelevel**(3)](/man/os/libselinux/get_default_context_with_rolelevel.3)  
[**query\_user\_context**(3)](/man/os/libselinux/query_user_context.3)  
[**manual\_user\_enter\_context**(3)](/man/os/libselinux/manual_user_enter_context.3)

# [FILE FORMAT](#FILE_FORMAT)

The file consists of a single line entry as follows:

*role:type*\[**:range**]

Where:

*role* *type* *range*

A role, type and optional range (for MCS/MLS), separated by colons (:) to form a valid login process context for an administrator to access the system.

# [EXAMPLE](#EXAMPLE)

\# ./contexts/failsafe\_context  
unconfined\_r:unconfined\_t:s0

# [SEE ALSO](#SEE_ALSO)

[**selinux**(8)](/man/os/libselinux/selinux.8), [**selinux\_failsafe\_context\_path**(3)](/man/os/libselinux/selinux_failsafe_context_path.3), [**PAM**(8)](/man/os/libselinux/PAM.8), [**selinux\_default\_type\_path**(3)](/man/os/libselinux/selinux_default_type_path.3), [**get\_default\_context**(3)](/man/os/libselinux/get_default_context.3), [**get\_ordered\_context\_list**(3)](/man/os/libselinux/get_ordered_context_list.3), [**get\_ordered\_context\_list\_with\_level**(3)](/man/os/libselinux/get_ordered_context_list_with_level.3), [**get\_default\_context\_with\_level**(3)](/man/os/libselinux/get_default_context_with_level.3), [**get\_default\_context\_with\_role**(3)](/man/os/libselinux/get_default_context_with_role.3), [**get\_default\_context\_with\_rolelevel**(3)](/man/os/libselinux/get_default_context_with_rolelevel.3), [**query\_user\_context**(3)](/man/os/libselinux/query_user_context.3), [**manual\_user\_enter\_context**(3)](/man/os/libselinux/manual_user_enter_context.3), [**selinux\_config**(5)](/man/os/libselinux/selinux_config.5)

28-Nov-2011 Security Enhanced Linux

---

Document: failsafe_context(5) from libselinux 3.11-r2 (Chainguard OS)
Source: https://github.com/SELinuxProject/selinux.git