3.6. Adding a new user as an SELinux-confined user

Procedure

1. Enter the following command to create a new Linux user named <example_user> and map it to the SELinux staff_u user:

   # useradd -Z staff_u <example_user>

2. To assign a password to the Linux <example_user> user:

   # passwd <example_user>
   Changing password for user <example_user>.
   New password:
   Retype new password:
   passwd: all authentication tokens updated successfully.

3. Log out of your current session.
4. Log in as the Linux <example_user> user. The user’s shell launches with the staff_u context.

Verification

1. When logged in as the <example_user> user, check the context of a Linux user:

   $ id -Z
   uid=1000(<example_user>) gid=1000(<example_user>) groups=1000(<example_user>) context=staff_u:staff_r:staff_t:s0-s0:c0.c1023