runcon(1) — Linux manual page


RUNCON(1)                     User Commands                    RUNCON(1)

NAME         top

       runcon - run command with specified security context

SYNOPSIS         top

       runcon CONTEXT COMMAND [args]
       runcon [ -c ] [-u USER] [-r ROLE] [-t TYPE] [-l RANGE] COMMAND

DESCRIPTION         top

       Run COMMAND with completely-specified CONTEXT, or with current or
       transitioned security context modified by one or more of LEVEL,
       ROLE, TYPE, and USER.

       If none of -c, -t, -u, -r, or -l, is specified, the first
       argument is used as the complete context.  Any additional
       arguments after COMMAND are interpreted as arguments to the

       Note that only carefully-chosen contexts are likely to
       successfully run.

       Run a program in a different SELinux security context.  With
       neither CONTEXT nor COMMAND, print the current security context.

       Mandatory arguments to long options are mandatory for short
       options too.

              Complete security context

       -c, --compute
              compute process transition context before modifying

       -t, --type=TYPE
              type (for same role as parent)

       -u, --user=USER
              user identity

       -r, --role=ROLE

       -l, --range=RANGE

       --help display this help and exit

              output version information and exit

   Exit status:
       125    if the runcon command itself fails

       126    if COMMAND is found but cannot be invoked

       127    if COMMAND cannot be found

       -      the exit status of COMMAND otherwise

AUTHOR         top

       Written by Russell Coker.

REPORTING BUGS         top

       GNU coreutils online help:
       Report any translation bugs to

COPYRIGHT         top

       Copyright © 2023 Free Software Foundation, Inc.  License GPLv3+:
       GNU GPL version 3 or later <>.
       This is free software: you are free to change and redistribute
       it.  There is NO WARRANTY, to the extent permitted by law.

SEE ALSO         top

       Full documentation
       or available locally via: info '(coreutils) runcon invocation'

COLOPHON         top

       This page is part of the coreutils (basic file, shell and text
       manipulation utilities) project.  Information about the project
       can be found at ⟨⟩.  If you
       have a bug report for this manual page, see
       ⟨⟩.  This page was obtained
       from the tarball coreutils-9.4.tar.xz fetched from
       ⟨⟩ on 2023-12-22.  If you
       discover any rendering problems in this HTML version of the page,
       or you believe there is a better or more up-to-date source for
       the page, or you have corrections or improvements to the
       information in this COLOPHON (which is not part of the original
       manual page), send a mail to

GNU coreutils 9.4              August 2023                     RUNCON(1)

Pages that refer to this page: newrole(1)setpriv(1)run_init(8)sandbox(8)seunshare(8)