service\_seusers(5) SELinux configuration service\_seusers(5)

# [NAME](#NAME)

service\_seusers - The SELinux GNU/Linux user and service to SELinux user mapping configuration files

# [DESCRIPTION](#DESCRIPTION)

These are optional files that allow services to define an SELinux user when authenticating via SELinux-aware login applications such as [**PAM**(8)](/man/os/libselinux/PAM.8).

There is one file for each GNU/Linux user name that will be required to run a service with a specific SELinux user name.

The path for each configuration file is formed by the path returned by [**selinux\_policy\_root**(3)](/man/os/libselinux/selinux_policy_root.3) with */logins/username* appended (where *username* is a file representing the GNU/Linux user name). The default services directory is located at:

*/etc/selinux/{SELINUXTYPE}/logins*

Where *{SELINUXTYPE}* is the entry from the selinux configuration file *config* (see [**selinux\_config**(5)](/man/os/libselinux/selinux_config.5)).

[**getseuser**(3)](/man/os/libselinux/getseuser.3) reads this file to map services to an SELinux user.

# [FILE FORMAT](#FILE_FORMAT)

Each line within the *username* file is formatted as follows with each component separated by a colon:

*service:seuser\[:*range*]*

Where:

*service*

The service name used by the application.

*seuser*

The SELinux user name.

*range*

The range for MCS/MLS policies.

# [EXAMPLES](#EXAMPLES)

Example 1 - for the 'root' user:

\# ./logins/root  
ipa:user\_u:s0  
this\_service:unconfined\_u:s0

Example 2 - for GNU/Linux user 'rch':

\# ./logins/rch  
ipa:unconfined\_u:s0  
that\_service:unconfined\_u:s0

# [SEE ALSO](#SEE_ALSO)

[**selinux**(8)](/man/os/libselinux/selinux.8), [**PAM**(8)](/man/os/libselinux/PAM.8), [**selinux\_policy\_root**(3)](/man/os/libselinux/selinux_policy_root.3), [**getseuser**(3)](/man/os/libselinux/getseuser.3), [**selinux\_config**(5)](/man/os/libselinux/selinux_config.5)

28-Nov-2011 Security Enhanced Linux

---

Document: service_seusers(5) from libselinux 3.11-r2 (Chainguard OS)
Source: https://github.com/SELinuxProject/selinux.git