26.2. Configuration Examples

Procedure 26.1. How to Add a User to an SELinux Mapping

1. To create a new SELinux mapping, enter the following command where SELinux_mapping is the name of the new SELinux mapping and the --selinuxuser option specifies a particular SELinux user:

   ~]$ ipa selinuxusermap-add SELinux_mapping --selinuxuser=staff_u:s0-s0:c0.c1023ipa selinuxusermap-add SELinux_mapping --selinuxuser=staff_u:s0-s0:c0.c1023ipa selinuxusermap-add SELinux_mapping --selinuxuser=staff_u:s0-s0:c0.c1023

   Copy to Clipboard Toggle word wrap
2. Enter the following command to add an IdM user with the tuser user name to the SELinux mapping:

   ~]$ ipa selinuxusermap-add-user --users=tuser SELinux_mapping

   Copy to Clipboard Toggle word wrap
3. To add a new host named ipaclient.example.com to the SELinux mapping, enter the following command:

   ~]$ ipa selinuxusermap-add-host --hosts=ipaclient.example.com SELinux_mappingipa selinuxusermap-add-host --hosts=ipaclient.example.com SELinux_mapping

   Copy to Clipboard Toggle word wrap
4. The tuser user gets the staff_u:s0-s0:c0.c1023 label when logged in to the ipaclient.example.com host:

   [tuser@ipa-client]$ id -Z
   staff_u:staff_r:staff_t:s0-s0:c0.c1023
   

   Copy to Clipboard Toggle word wrap