genhomedircon(8) — Linux manual page


GENHOMEDIRCON(8)                 SELinux                GENHOMEDIRCON(8)

NAME         top

       genhomedircon - generate SELinux file context configuration
       entries for user home directories

DESCRIPTION         top

       genhomedircon is a script that executes semodule to rebuild the
       currently active SELinux policy (without reloading it) and to
       create the labels for each user home directory based on directory
       paths returned by calls to getpwent().

       The latter functionality depends on the "usepasswd" parameter
       being set to "true" (default) in /etc/selinux/semanage.conf.

       This script is usually executed by semanage although this default
       behavior can be optionally modified by setting to "true" the
       "disable-genhomedircon" in /etc/selinux/semanage.conf.

       Directories can be excluded from the list of home directories by
       the setting "ignoredirs" in /etc/selinux/semanage.conf.

AUTHOR         top

       This manual page was written by Dan Walsh <>

SEE ALSO         top

       semanage.conf(5), semodule(8), semanage(8), getpwent(3),

COLOPHON         top

       This page is part of the selinux (Security-Enhanced Linux user-
       space libraries and tools) project.  Information about the
       project can be found at 
       ⟨⟩.  If you have a
       bug report for this manual page, see
       This page was obtained from the project's upstream Git repository
       ⟨⟩ on 2024-06-14.  (At
       that time, the date of the most recent commit that was found in
       the repository was 2023-05-11.)  If you discover any rendering
       problems in this HTML version of the page, or you believe there
       is a better or more up-to-date source for the page, or you have
       corrections or improvements to the information in this COLOPHON
       (which is not part of the original manual page), send a mail to

Security Enhanced Linux         Sep 2011                GENHOMEDIRCON(8)

Pages that refer to this page: selabel_file(5)