restorecon_xattr(8) | SELinux User Command | restorecon_xattr(8) |
restorecon_xattr - manage security.sehash extended attribute entries added by setfiles(8) or restorecon(8).
restorecon_xattr [-d] [-D] [-m] [-n] [-r] [-v] [-e directory] [-f specfile] pathname
restorecon_xattr will display the SHA1 digests added to extended attributes security.sehash or delete the attribute completely. These attributes are set by restorecon(8) or setfiles(8) to specified directories when relabeling recursively.
restorecon_xattr is useful for managing the extended attribute entries particularly when users forget what directories they ran restorecon(8) or setfiles(8) from.
RAMFS and TMPFS filesystems do not support the security.sehash extended attribute and are automatically excluded from searches.
By default restorecon_xattr will display the SHA1 digests with "Match" appended if they match the default specfile set or the specfile set used with the -f option. Non-matching SHA1 digests will be displayed with "No Match" appended. This feature can be disabled by the -n option.
24 Sept 2016 |