Man Linux: Main Page and Category List


       restorecon - restore file(s) default SELinux security contexts.


       restorecon  [-o  outfilename  ]  [-R]  [-n]  [-v|-p]  [-e  directory  ]

       restorecon -f infilename [-o outfilename ] [-e directory  ]  [-R]  [-n]
       [-v|-p] [-F]


       This manual page describes the restorecon program.

       This  program  is  primarily used to set the security context (extended
       attributes) on one or more files.

       It can be run at any time to correct errors, to  add  support  for  new
       policy,  or  with  the  -n  option  it  can just check whether the file
       contexts are all as you expect.

       It is the same executable  as  setfiles  but  operates  in  a  slightly
       different manner depending on it's argv[0].


       -i     ignore files that do not exist

       -f infilename
              infilename   contains  a  list  of  files  to  be  processed  by
              application. Use - for stdin.

       -e directory
              directory  to  exclude  (repeat  option  for   more   than   one

       -R -r  change files and directories file labels recursively

       -n     don't change any file labels.

       -o outfilename
              save list of files with incorrect context in outfilename.

       -v     show changes in file labels.

       -vv    show  changes  in  file  labels,  if  type,  role,  or  user are

       -p     show a progress indication in the  form  of  one  dot  per  1000

       -F     Force  reset  of  context to match file_context for customizable
              files, or the user section, if it has changed.

       -0     Input items are terminated by a null  character  instead  of  by
              whitespace,  and the quotes and backslash are not special (every
              character is taken literally).  Disables the end of file string,
              which  is  treated  like  any other argument.  Useful when input
              items   might   contain   white   space,   quote    marks,    or
              backslashes.The   GNU   find   -print0   option  produces  input
              suitable for this mode.


       pathname...  The pathname for the file(s) to be relabeled.


       restorecon does not follow symbolic links.


       This man page was written by Dan Walsh  <>.   Some  of
       the  content  of  this  man  page  was taken from the setfiles man page
       written by  Russell  Coker  <>.   The  program  was
       written by Dan Walsh <>.


       load_policy(8), checkpolicy(8) setfiles(8)

                                  2002031409                     restorecon(8)