runcon
(1)run command with specified security context
Options
7-c--computecompute process transition context before modifying
-t--typeTYPEtype (for same role as parent)
-u--userUSERuser identity
-r--roleROLErole
-l--rangeRANGElevelrange
--helpdisplay this help and exit
--versionoutput version information and exit
DESCRIPTION
Run COMMAND with completely-specified CONTEXT, or with current or transitioned security context modified by one or more of LEVEL, ROLE, TYPE, and USER.
If none of -c, -t, -u, -r, or -l, is specified, the first argument is used as the complete context. Any additional arguments after COMMAND are interpreted as arguments to the command.
Only carefully-chosen contexts are likely to run successfully.
Run a program in a different SELinux security context. With neither CONTEXT nor COMMAND, print the current security context.
Mandatory arguments to long options are mandatory for short options too.
- CONTEXT
- Complete security context
- -c, --compute
- compute process transition context before modifying
- -t, --type=TYPE
- type (for same role as parent)
- -u, --user=USER
- user identity
- -r, --role=ROLE
- role
- -l, --range=RANGE
- levelrange
- --help
- display this help and exit
- --version
- output version information and exit
Exit status:
- 125
- if the runcon command itself fails
- 126
- if COMMAND is found but cannot be invoked
- 127
- if COMMAND cannot be found
- -
- the exit status of COMMAND otherwise
AUTHOR
REPORTING BUGS
GNU coreutils online help:
https://www.gnu.org/software/coreutils/
Report any translation bugs to
https://translationproject.org/team/
SEE ALSO
Full documentation
https://www.gnu.org/software/coreutils/runcon
or available locally via: info '(coreutils) runcon invocation'
Packaged by Debian (9.7-3)
Copyright © 2025 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
https://gnu.org/licenses/gpl.html.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.