Forrest logo
back to the chcon tool

chcon:tldr:520ea

chcon: Change only the role part of SELinux security context.
$ chcon -r ${role} ${filename}
try on your machine

The command chcon -r ${role} ${filename} is used to change the SELinux security context of a file, specified by ${filename}, to the specified SELinux role, specified by ${role}.

Here's a breakdown of each component of the command:

  • chcon: This is the command itself which stands for "change context". It is a command-line utility used in systems that implement SELinux (Security-Enhanced Linux) to modify the SELinux context of files or directories.

  • -r: This option is used to specify the SELinux role to set for the file. The ${role} is a placeholder that should be replaced with the actual role you want to assign to the file. Roles in SELinux define sets of permissions and restrictions that define the actions a process running with a particular role can perform.

  • ${filename}: This is also a placeholder which should be replaced with the actual path to the file you want to modify the SELinux context for. It specifies the file for which the SELinux security context should be changed.

To use this command, you would replace ${role} with the desired role, and ${filename} with the path to the file you want to modify. For example, to set the SELinux role of the file /var/www/index.html to httpd_sys_content_t, the command would be: chcon -r httpd_sys_content_t /var/www/index.html.

This explanation was created by an AI. In most cases those are correct. But please always be careful and never run a command you are not sure if it is safe.
back to the chcon tool