huschi.net

default_contexts(5)          SELinux configuration         default_contexts(5)
NAME
       default_contexts - The SELinux default contexts configuration file
DESCRIPTION
       The  default  contexts  configuration  file  default_contexts  contains
       entries that allow SELinux-aware login applications such as PAM(8)
       SELinux-aware login applications generally use one or more of the  fol-
       lowing  libselinux functions that read these files from the active pol-
       icy path:
              get_default_context(3)
              get_ordered_context_list(3)
              get_ordered_context_list_with_level(3)
              get_default_context_with_level(3)
              get_default_context_with_role(3)
              get_default_context_with_rolelevel(3)
              query_user_context(3)
              manual_user_enter_context(3)
       The default context configuration file path for the  active  policy  is
       returned by selinux_default_contexts_path(3). The default, default con-
       texts file is:
              /etc/selinux/{SELINUXTYPE}/contexts/default_contexts
       Where {SELINUXTYPE} is the entry from the  selinux  configuration  file
       config (see selinux_config(5)).
FILE FORMAT
       Each line in the default configuration file consists of the following:
              login_process user_login_process [user_login_process] ...
       Where:
              login_process
                     This  consists  of  a role:type[:range] entry that repre-
                     sents the login process context that are defined  in  the
                     policy.
              user_login_process
                     This  consists  of  one or more role:type[:range] entries
                     that represent the user login process context defined  in
                     the policy.
EXAMPLE
       # ./contexts/default_contexts
       system_r:crond_t:s0            system_r:system_crond_t:s0
       system_r:local_login_t:s0      user_r:user_t:s0 staff_r:staff_t:s0
       system_r:remote_login_t:s0     user_r:user_t:s0
       system_r:sshd_t:s0             user_r:user_t:s0
       system_r:sulogin_t:s0          sysadm_r:sysadm_t:s0
       system_r:xdm_t:s0              user_r:user_t:s0
SEE ALSO
       selinux(8), selinux_default_contexts_path(3), PAM(8),
       selinux_default_type_path(3), get_default_context(3),
       get_ordered_context_list(3), get_ordered_context_list_with_level(3),
       get_default_context_with_level(3), get_default_context_with_role(3),
       get_default_context_with_rolelevel(3), query_user_context(3),
       manual_user_enter_context(3), selinux_config(5)
Security Enhanced Linux           28-Nov-2011              default_contexts(5)