FM / help

/usr/lib/python3.6/site-packages/sepolicy/help/

/usr/lib/python3.6/site-packages/sepolicy/help

Name	Size	Mode	Actions
__pycache__/	-	0755	rm
booleans.png	72749	0644	edit dl rm
booleans.txt	478	0644	edit dl rm
booleans_more.png	62348	0644	edit dl rm
booleans_more.txt	193	0644	edit dl rm
booleans_more_show.png	34948	0644	edit dl rm
booleans_more_show.txt	62	0644	edit dl rm
booleans_toggled.png	61958	0644	edit dl rm
booleans_toggled.txt	310	0644	edit dl rm
files_apps.png	81978	0644	edit dl rm
files_apps.txt	563	0644	edit dl rm
files_exec.png	67866	0644	edit dl rm
files_exec.txt	398	0644	edit dl rm
files_write.png	77773	0644	edit dl rm
files_write.txt	567	0644	edit dl rm
file_equiv.png	49221	0644	edit dl rm
file_equiv.txt	1181	0644	edit dl rm
lockdown.png	50599	0644	edit dl rm
lockdown.txt	291	0644	edit dl rm
lockdown_permissive.png	30025	0644	edit dl rm
lockdown_permissive.txt	722	0644	edit dl rm
lockdown_ptrace.png	29336	0644	edit dl rm
lockdown_ptrace.txt	1249	0644	edit dl rm
lockdown_unconfined.png	27473	0644	edit dl rm
lockdown_unconfined.txt	867	0644	edit dl rm
login.png	40102	0644	edit dl rm
login.txt	786	0644	edit dl rm
login_default.png	41680	0644	edit dl rm
login_default.txt	507	0644	edit dl rm
ports_inbound.png	58994	0644	edit dl rm
ports_inbound.txt	336	0644	edit dl rm
ports_outbound.png	52979	0644	edit dl rm
ports_outbound.txt	346	0644	edit dl rm
start.png	14128	0644	edit dl rm
start.txt	505	0644	edit dl rm
system.png	50601	0644	edit dl rm
system.txt	81	0644	edit dl rm
system_boot_mode.png	52674	0644	edit dl rm
system_boot_mode.txt	458	0644	edit dl rm
system_current_mode.png	52641	0644	edit dl rm
system_current_mode.txt	344	0644	edit dl rm
system_export.png	53210	0644	edit dl rm
system_export.txt	416	0644	edit dl rm
system_policy_type.png	54631	0644	edit dl rm
system_policy_type.txt	410	0644	edit dl rm
system_relabel.png	52867	0644	edit dl rm
system_relabel.txt	399	0644	edit dl rm
transition_file.png	69779	0644	edit dl rm
transition_file.txt	1050	0644	edit dl rm
transition_from.png	63231	0644	edit dl rm
transition_from.txt	619	0644	edit dl rm
transition_from_boolean.png	67329	0644	edit dl rm
transition_from_boolean.txt	463	0644	edit dl rm
transition_from_boolean_1.png	71717	0644	edit dl rm
transition_from_boolean_1.txt	235	0644	edit dl rm
transition_from_boolean_2.png	32219	0644	edit dl rm
transition_from_boolean_2.txt	132	0644	edit dl rm
transition_to.png	58909	0644	edit dl rm
transition_to.txt	605	0644	edit dl rm
users.png	57622	0644	edit dl rm
users.txt	814	0644	edit dl rm
__init__.py	0	0644	edit dl rm

Edit: /usr/lib/python3.6/site-packages/sepolicy/help/file_equiv.txt (1181B)

SELinux can either setup labeling directory using the Application/files screen, or you can setup file equivalence.

File Equivalence allows an administrator to label entire directory trees as the same way as the Equivalence directory tree.

Use Case 1:
An administrator want to store his Apache root content in a location other then /var/www like /srv/www. He could define an equivalence between /srv/www and /var/www.

libselinux reads the equivalence rules and does the substitution when ever the matchpathcon function is called.  Tools like restorecon/rpm/udev and others will all follow the substitution.  Using the example above when matchpathcon is handed /srv/www/cgi-bin/myscript.cgi, it substitutes /var/www for /svr/www and looks up the context of /var/www/cgi-bin/myscript.cgi.

In the command line you could execute.

# semanage fcontext -a -e /var/www /srv/www

Another common case where you might want to use file equivalence, is if you put your users home directories in a location other then /home.

If you setup an equivalence between /home and /export/home

# matchpathcon /export/home/dwalsh/.ssh
/export/home/dwalsh/.ssh    unconfined_u:object_r:home_ssh_t:s0

SELinux can either setup labeling directory using the Application/files screen, or you can setup file equivalence. File Equivalence allows an administrator to label entire directory trees as the same way as the Equivalence directory tree. Use Case 1: An administrator want to store his Apache root content in a location other then /var/www like /srv/www. He could define an equivalence between /srv/www and /var/www. libselinux reads the equivalence rules and does the substitution when ever the matchpathcon function is called. Tools like restorecon/rpm/udev and others will all follow the substitution. Using the example above when matchpathcon is handed /srv/www/cgi-bin/myscript.cgi, it substitutes /var/www for /svr/www and looks up the context of /var/www/cgi-bin/myscript.cgi. In the command line you could execute. # semanage fcontext -a -e /var/www /srv/www Another common case where you might want to use file equivalence, is if you put your users home directories in a location other then /home. If you setup an equivalence between /home and /export/home # matchpathcon /export/home/dwalsh/.ssh /export/home/dwalsh/.ssh unconfined_u:object_r:home_ssh_t:s0