6.6. Increasing file sensitivity levels in MLS

Procedure

1. Optional: Display the security context of the current user:

   $ id -Z
   user_u:user_r:user_t:s0-s2

2. Change the lower level of the user’s MLS clearance range to the level which you want to assign to the file:

   $ newrole -l s1-s2

3. Optional: Display the security context of the current user:

   $ id -Z
   user_u:user_r:user_t:s1-s2

4. Optional: Display the security context of the file:

   $ ls -Z /path/to/file
   user_u:object_r:user_home_t:s0 /path/to/file

5. Change the file’s sensitivity level to the lower level of the user’s clearance range by modifying the file:

   $ touch /path/to/file

   重要

   The classification level reverts to the default value if the restorecon command is used on the system.

6. Optional: Exit the shell to return to the user’s previous security range:

   $ exit