Na}{

File Content: `file_equiv.txt`

SELinux can either setup labeling directory using the Application/files screen, or you can setup file equivalence.


File Equivalence allows an administrator to label entire directory trees as the same way as the Equivalence directory tree.

Use Case 1:
An administrator want to store his Apache root content in a location other then /var/www like /srv/www. He could define an equivalence between /srv/www and /var/www.

libselinux reads the equivalence rules and does the substitution when ever the matchpathcon function is called.  Tools like restorecon/rpm/udev and others will all follow the substitution.  Using the example above when matchpathcon is handed /srv/www/cgi-bin/myscript.cgi, it substitutes /var/www for /svr/www and looks up the context of /var/www/cgi-bin/myscript.cgi.

In the command line you could execute.

# semanage fcontext -a -e /var/www /srv/www

Another common case where you might want to use file equivalence, is if you put your users home directories in a location other then /home.

If you setup an equivalence between /home and /export/home

# matchpathcon /export/home/dwalsh/.ssh
/export/home/dwalsh/.ssh    unconfined_u:object_r:home_ssh_t:s0

Name	Size	Permission
__pycache__	---	0755
__init__.py	0 bytes	0644
booleans.png	72749 bytes	0644
booleans.txt	478 bytes	0644
booleans_more.png	62348 bytes	0644
booleans_more.txt	193 bytes	0644
booleans_more_show.png	34948 bytes	0644
booleans_more_show.txt	62 bytes	0644
booleans_toggled.png	61958 bytes	0644
booleans_toggled.txt	310 bytes	0644
file_equiv.png	49221 bytes	0644
file_equiv.txt	1181 bytes	0644
files_apps.png	81978 bytes	0644
files_apps.txt	563 bytes	0644
files_exec.png	67866 bytes	0644
files_exec.txt	398 bytes	0644
files_write.png	77773 bytes	0644
files_write.txt	567 bytes	0644
lockdown.png	50599 bytes	0644
lockdown.txt	291 bytes	0644
lockdown_permissive.png	30025 bytes	0644
lockdown_permissive.txt	722 bytes	0644
lockdown_ptrace.png	29336 bytes	0644
lockdown_ptrace.txt	1249 bytes	0644
lockdown_unconfined.png	27473 bytes	0644
lockdown_unconfined.txt	867 bytes	0644
login.png	40102 bytes	0644
login.txt	786 bytes	0644
login_default.png	41680 bytes	0644
login_default.txt	507 bytes	0644
ports_inbound.png	58994 bytes	0644
ports_inbound.txt	336 bytes	0644
ports_outbound.png	52979 bytes	0644
ports_outbound.txt	346 bytes	0644
start.png	14128 bytes	0644
start.txt	505 bytes	0644
system.png	50601 bytes	0644
system.txt	81 bytes	0644
system_boot_mode.png	52674 bytes	0644
system_boot_mode.txt	458 bytes	0644
system_current_mode.png	52641 bytes	0644
system_current_mode.txt	344 bytes	0644
system_export.png	53210 bytes	0644
system_export.txt	416 bytes	0644
system_policy_type.png	54631 bytes	0644
system_policy_type.txt	410 bytes	0644
system_relabel.png	52867 bytes	0644
system_relabel.txt	399 bytes	0644
transition_file.png	69779 bytes	0644
transition_file.txt	1050 bytes	0644
transition_from.png	63231 bytes	0644
transition_from.txt	619 bytes	0644
transition_from_boolean.png	67329 bytes	0644
transition_from_boolean.txt	463 bytes	0644
transition_from_boolean_1.png	71717 bytes	0644
transition_from_boolean_1.txt	235 bytes	0644
transition_from_boolean_2.png	32219 bytes	0644
transition_from_boolean_2.txt	132 bytes	0644
transition_to.png	58909 bytes	0644
transition_to.txt	605 bytes	0644
users.png	57622 bytes	0644
users.txt	814 bytes	0644

File Content: file_equiv.txt

File Content: `file_equiv.txt`