Section 5: file formats
service_seusers – The SELinux GNU/Linux user and service to SELinux user mapping configuration files Description These are optional files that allow services to define an SELinux user when authenticating via SELinux-aware login applications such as PAM(8). There is one file for each GNU/Linux user name that will be required to run a service with a…
selabel_db – userspace SELinux labeling interface and configuration file format for the RDBMS objects context backend Synopsis #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *object_name, int object_type); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char *object_name, int object_type); Description The DB contexts backend maps from a pair of object name and class…
sepermit.conf – configuration file for the pam_sepermit module Description The lines of the configuration file have the following syntax: <user>[:<option>:<option>…] The user can be specified in the following manner: • a username • a groupname, with @group syntax. This should not be confused with netgroups. • a SELinux user name with %seuser syntax. The recognized…
sepermit.conf – configuration file for the pam_sepermit module Description The lines of the configuration file have the following syntax: <user>[:<option>:<option>…] The user can be specified in the following manner: • a username • a groupname, with @group syntax. This should not be confused with netgroups. • a SELinux user name with %seuser syntax. The recognized…
sensors.conf – libsensors configuration file Description sensors.conf describes how libsensors, and so all programs using it, should translate the raw readings from the kernel modules to real-world values. Semantics On a given system, there may be one or more hardware monitoring chips. Each chip may have several features. For example, the LM78 monitors 7 voltage…
sensors.conf – libsensors configuration file Description sensors.conf describes how libsensors, and so all programs using it, should translate the raw readings from the kernel modules to real-world values. Semantics On a given system, there may be one or more hardware monitoring chips. Each chip may have several features. For example, the LM78 monitors 7 voltage…
sensors.conf – libsensors configuration file Description sensors.conf describes how libsensors, and so all programs using it, should translate the raw readings from the kernel modules to real-world values. Semantics On a given system, there may be one or more hardware monitoring chips. Each chip may have several features. For example, the LM78 monitors 7 voltage…
index.sense, sense.idx – WordNet’s sense index Description The WordNet sense index provides an alternate method for accessing synsets and word senses in the WordNet database. It is useful to applications that retrieve synsets or other information related to a specific sense in WordNet, rather than all the senses of a word or collocation. It can…
semanage.conf – global configuration file for the SELinux Management library Description The semanage.conf file is usually located under the directory /etc/selinux and it is used for run-time configuration of the behavior of the SELinux Management library. Each line should contain a configuration parameter followed by the equal sign ("=") and then followed by the configuration…
semanage.conf – global configuration file for the SELinux Management library Description The semanage.conf file is usually located under the directory /etc/selinux and it is used for run-time configuration of the behavior of the SELinux Management library. Each line should contain a configuration parameter followed by the equal sign ("=") and then followed by the configuration…
config – The SELinux sub-system configuration file. Description The SELinux config file controls the state of SELinux regarding: 1. The policy enforcement status – enforcing, permissive or disabled. 2. The policy name or type that forms a path to the policy to be loaded and its supporting configuration files. 3. How local users and booleans…
selabel_x – userspace SELinux labeling interface and configuration file format for the X Window System contexts backend. This backend is also used to determine the default context for labeling remotely connected X clients Synopsis #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *object_name, int object_type); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char…
selabel_media – userspace SELinux labeling interface and configuration file format for the media contexts backend Synopsis #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *device_name, int unused); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char *device_name, int unused); Description The media contexts backend maps from media device names such as "cdrom" or "floppy"…
selabel_file – userspace SELinux labeling interface and configuration file format for the file contexts backend Synopsis #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *path, int mode); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char *path, int mode); Description The file contexts backend maps from pathname/mode combinations into security contexts. It is used…
selabel_db – userspace SELinux labeling interface and configuration file format for the RDBMS objects context backend Synopsis #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *object_name, int object_type); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char *object_name, int object_type); Description The DB contexts backend maps from a pair of object name and class…
securetty_types – The SELinux secure tty type configuration file Description The securetty_types file contains a list of types associated to secure tty type that are defined in the policy for use by SELinux-aware applications. selinux_securetty_types_path(3) will return the active policy path to this file. The default securetty types file is: /etc/selinux/{SELINUXTYPE}/contexts/securetty_types Where {SELINUXTYPE} is the…
securetty – list of terminals on which root is allowed to login Description The file /etc/securetty contains the names of terminals (one per line, without leading /dev/) which are considered secure for the transmission of certain authentication tokens. It is used by (some versions of) login(1) to restrict the terminals on which root is allowed…
secolor.conf – The SELinux color configuration file Description This optional file controls the color to be associated to the context components associated to the raw context passed by selinux_raw_context_to_color(3), when context related information is to be displayed in color by an SELinux-aware application. selinux_raw_context_to_color(3) obtains this color information from the active policy secolor.conf file as…
secolor.conf – The SELinux color configuration file Description This optional file controls the color to be associated to the context components associated to the raw context passed by selinux_raw_context_to_color(3), when context related information is to be displayed in color by an SELinux-aware application. selinux_raw_context_to_color(3) obtains this color information from the active policy secolor.conf file as…
secmod.db – Legacy NSS security modules database Description secmod.db is an NSS security modules database. The security modules database is used to keep track of the NSS security modules. The NSS security modules export their services via the PKCS #11 API which NSS uses as its Services Provider Interface. The command line utility modutil is…