File: coreutils.info, Node: chcon invocation, Next: runcon invocation, Up: SELinux context 22.1 ‘chcon’: Change SELinux context of file ============================================ ‘chcon’ changes the SELinux security context of the selected files. Synopses: chcon [OPTION]... CONTEXT FILE... chcon [OPTION]... [-u USER] [-r ROLE] [-l RANGE] [-t TYPE] FILE... chcon [OPTION]... --reference=RFILE FILE... Change the SELinux security context of each FILE to CONTEXT. With ‘--reference’, change the security context of each FILE to that of RFILE. The program accepts the following options. Also see *note Common options::. ‘--dereference’ Do not affect symbolic links but what they refer to; this is the default. ‘-h’ ‘--no-dereference’ Affect the symbolic links themselves instead of any referenced file. ‘--reference=RFILE’ Use RFILE’s security context rather than specifying a CONTEXT value. ‘-R’ ‘--recursive’ Operate on files and directories recursively. ‘--preserve-root’ Refuse to operate recursively on the root directory, ‘/’, when used together with the ‘--recursive’ option. *Note Treating / specially::. ‘--no-preserve-root’ Do not treat the root directory, ‘/’, specially when operating recursively; this is the default. *Note Treating / specially::. ‘-H’ If ‘--recursive’ (‘-R’) is specified and a command line argument is a symbolic link to a directory, traverse it. *Note Traversing symlinks::. ‘-L’ In a recursive traversal, traverse every symbolic link to a directory that is encountered. *Note Traversing symlinks::. ‘-P’ Do not traverse any symbolic links. This is the default if none of ‘-H’, ‘-L’, or ‘-P’ is specified. *Note Traversing symlinks::. ‘-v’ ‘--verbose’ Output a diagnostic for every file processed. ‘-u USER’ ‘--user=USER’ Set user USER in the target security context. ‘-r ROLE’ ‘--role=ROLE’ Set role ROLE in the target security context. ‘-t TYPE’ ‘--type=TYPE’ Set type TYPE in the target security context. ‘-l RANGE’ ‘--range=RANGE’ Set range RANGE in the target security context. An exit status of zero indicates success, and a nonzero value indicates failure.