NAME | SYNOPSIS | DESCRIPTION | SEE ALSO | AUTHOR | COLOPHON |
SEUNSHARE(8) User Commands SEUNSHARE(8)
seunshare - Run cmd with alternate homedir, tmpdir and/or SELinux context
seunshare [ -v ] [ -C ] [ -k ] [ -t tmpdir ] [ -h homedir ] [ -Z context ] -- executable [args]
Run the executable within the specified context, using the alternate home directory and /tmp directory. The seunshare command unshares from the default namespace, then mounts the specified homedir and tmpdir over the default homedir and /tmp. Finally it tells the kernel to execute the application under the specified SELinux context. -h homedir Alternate homedir to be used by the application. Homedir must be owned by the user. -t tmpdir Use alternate tempory directory to mount on /tmp. tmpdir must be owned by the user. -C --capabilities Allow apps executed within the namespace to use capabilities. Default is no capabilities. -k --kill Kill all processes with matching MCS level. -Z context Use alternate SELinux context while running the executable. -v Verbose output
runcon(1), sandbox(8), selinux(8)
This manual page was written by Dan Walsh <dwalsh@redhat.com> and Thomas Liu <tliu@fedoraproject.org>
This page is part of the selinux (Security-Enhanced Linux user-space
libraries and tools) project. Information about the project can be
found at ⟨https://github.com/SELinuxProject/selinux/wiki⟩. If you
have a bug report for this manual page, see
⟨https://github.com/SELinuxProject/selinux/wiki/Contributing⟩. This
page was obtained from the project's upstream Git repository
⟨https://github.com/SELinuxProject/selinux⟩ on 2017-07-05. If you
discover any rendering problems in this HTML version of the page, or
you believe there is a better or more up-to-date source for the page,
or you have corrections or improvements to the information in this
COLOPHON (which is not part of the original manual page), send a mail
to man-pages@man7.org
seunshare May 2010 SEUNSHARE(8)