26.2. Configuration Examples

download PDF

26.2.1. Mapping SELinux users to IdM users

The following procedure shows how to create a new SELinux mapping and how to add a new IdM user to this mapping.

Procedure 26.1. How to Add a User to an SELinux Mapping

  1. To create a new SELinux mapping, enter the following command where SELinux_mapping is the name of the new SELinux mapping and the --selinuxuser option specifies a particular SELinux user:
    ~]$ ipa selinuxusermap-add SELinux_mapping --selinuxuser=staff_u:s0-s0:c0.c1023
  2. Enter the following command to add an IdM user with the tuser user name to the SELinux mapping:
    ~]$ ipa selinuxusermap-add-user --users=tuser SELinux_mapping
  3. To add a new host named to the SELinux mapping, enter the following command:
    ~]$ ipa selinuxusermap-add-host SELinux_mapping
  4. The tuser user gets the staff_u:s0-s0:c0.c1023 label when logged in to the host:
    [tuser@ipa-client]$ id -Z
Red Hat logoGithubRedditYoutubeTwitter


Try, buy, & sell


About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

© 2024 Red Hat, Inc.