1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
.TH CHCAT "8" "September 2005" "chcat" "User Commands"
.SH NAME
chcat \- change SELinux security categories of files/users
.SH SYNOPSIS
.B chcat
\fIcategory file\fR...
.br
.B chcat -l
\fIcategory user\fR...
.br
.B chcat
\fI[[+|-]category...] file\fR...
.br
.B chcat -l
\fI[[+|-]category...] user\fR...
.br
.B chcat
[\fI-d\fR] \fIfile\fR...
.br
.B chcat -l
[\fI-d\fR] \fIuser\fR...
.br
.B chcat
\fI-L\fR [ \-l ] [ user ... ]
.br
.SH DESCRIPTION
.PP
Use +/- to add/remove categories from a \fIfile\fR or \fIuser\fR (only a single category can be specified at a time). Or specify the desired list/range of categories to be applied (replacing the existing categories).
.PP
.B
Note:
When removing a category you must specify '\-\-' on the command line before using the \-Category syntax. This tells the command that you have finished entering options and are now specifying a category name instead.
.TP
\fB\-d\fR
delete all categories from given FILE/USER.
.TP
\fB\-L\fR
list available categories.
.TP
\fB\-l\fR
Tells chcat to operate on users instead of files.
.SH EXAMPLE
.nf
Replace categories of user "test" with c0.c6
# chcat -l c0.c6 test
Add category c1023 to user "test"
# chcat -l +c1023 test
Remove category c5 from file "file"
# chcat -- -c5 file
Remove all categories from file "file"
# chcat -d file
.SH "SEE ALSO"
.TP
chcon(1), selinux(8), semanage(8)
.PP
.br
When operating on files this script wraps the chcon command.
.SH "FILES"
/etc/selinux/{SELINUXTYPE}/setrans.conf
.br
/etc/selinux/{SELINUXTYPE}/seusers
|
