seusers(5) SELinux configuration seusers(5)

# [NAME](#NAME)

seusers - The SELinux GNU/Linux user to SELinux user mapping configuration file

# [DESCRIPTION](#DESCRIPTION)

The *seusers* file contains a list GNU/Linux user to SELinux user mapping for use by SELinux-aware login applications such as [**PAM**(8)](/man/os/libselinux/PAM.8).

[**selinux\_usersconf\_path**(3)](/man/os/libselinux/selinux_usersconf_path.3) will return the active policy path to this file. The default SELinux users mapping file is located at:

*/etc/selinux/{SELINUXTYPE}/seusers*

Where *{SELINUXTYPE}* is the entry from the selinux configuration file *config* (see [**selinux\_config**(5)](/man/os/libselinux/selinux_config.5)).

[**getseuserbyname**(3)](/man/os/libselinux/getseuserbyname.3) reads this file to map a GNU/Linux user or group to an SELinux user.

# [FILE FORMAT](#FILE_FORMAT)

Each line of the *seusers* configuration file consists of the following:

\[**%group\_id**]|\[*user\_id*]**:seuser\_id**\[**:range**]

Where:

*group\_id*|*user\_id*

The GNU/Linux user id, or if preceded by the percentage (**%**) symbol, then a GNU/Linux group id.  
An optional entry set to **\_\_default\_\_** can be provided as a fall back if required.

*seuser\_id*

The SELinux user identity.

*range*

The optional level or range for an MLS/MCS policy.

# [EXAMPLE](#EXAMPLE)

\# ./seusers  
system\_u:system\_u:s0-s15:c0.c255  
root:root:s0-s15:c0.c255  
fred:user\_u:s0  
\_\_default\_\_:user\_u:s0  
%user\_group:user\_u:s0

# [SEE ALSO](#SEE_ALSO)

[**selinux**(8)](/man/os/libselinux/selinux.8), [**PAM**(8)](/man/os/libselinux/PAM.8), [**selinux\_usersconf\_path**(3)](/man/os/libselinux/selinux_usersconf_path.3), [**getseuserbyname**(3)](/man/os/libselinux/getseuserbyname.3), [**selinux\_config**(5)](/man/os/libselinux/selinux_config.5)

28-Nov-2011 Security Enhanced Linux

---

Document: seusers(5) from libselinux 3.11-r2 (Chainguard OS)
Source: https://github.com/SELinuxProject/selinux.git