.ie \n(.g .ds Aq \(aq
.el .ds Aq '
.TH RUNCON 1 "2026-10-29"
.SH NAME
runcon \- Run command with specified security context under SELinux enabled systems.
.SH SYNOPSIS
\fBruncon\fR CONTEXT COMMAND [ARG...]
.br
\fBruncon\fR [\-c] [\-u USER] [\-r ROLE] [\-t TYPE] [\-l RANGE] COMMAND [ARG...]
.SH DESCRIPTION
Run command with specified security context under SELinux enabled systems.
.SH OPTIONS
.TP
\fB\-c\fR, \fB\-\-compute\fR
Compute process transition context before modifying.
.TP
\fB\-u\fR, \fB\-\-user\fR \fI<USER>\fR
Set user USER in the target security context.
.TP
\fB\-r\fR, \fB\-\-role\fR \fI<ROLE>\fR
Set role ROLE in the target security context.
.TP
\fB\-t\fR, \fB\-\-type\fR \fI<TYPE>\fR
Set type TYPE in the target security context.
.TP
\fB\-l\fR, \fB\-\-range\fR \fI<RANGE>\fR
Set range RANGE in the target security context.
.TP
\fB\-h\fR, \fB\-\-help\fR
Print help
.TP
\fB\-V\fR, \fB\-\-version\fR
Print version
.TP
[\fIARG\fR]

.SH EXTRA
Run COMMAND with completely\-specified CONTEXT, or with current or transitioned security context modified by one or more of LEVEL, ROLE, TYPE, and USER.

If none of \-\-compute, \-\-type, \-\-user, \-\-role or \-\-range is specified, then the first argument is used as the complete context.

Note that only carefully\-chosen contexts are likely to successfully run.

If neither CONTEXT nor COMMAND is specified, the current security context is printed.
.SH VERSION
v(uutils coreutils) 0.12.0