| Eric Paris | 3c5abbc | 2011-08-15 13:56:02 -0400 | [diff] [blame] | 1 | .TH SEUNSHARE "8" "May 2010" "seunshare" "User Commands" |
| 2 | .SH NAME |
| 3 | seunshare \- Run cmd with alternate homedir, tmpdir and/or SELinux context |
| 4 | .SH SYNOPSIS |
| 5 | .B seunshare |
| Dan Walsh | de0795a | 2014-05-12 13:19:20 -0400 | [diff] [blame] | 6 | [ -v ] [ -C ] [ -k ] [ -t tmpdir ] [ -h homedir ] [ -Z context ] -- executable [args] |
| Eric Paris | 3c5abbc | 2011-08-15 13:56:02 -0400 | [diff] [blame] | 7 | .br |
| 8 | .SH DESCRIPTION |
| 9 | .PP |
| 10 | Run the |
| 11 | .I executable |
| 12 | within the specified context, using the alternate home directory and /tmp directory. The seunshare command unshares from the default namespace, then mounts the specified homedir and tmpdir over the default homedir and /tmp. Finally it tells the kernel to execute the application under the specified SELinux context. |
| 13 | |
| 14 | .TP |
| 15 | \fB\-h homedir\fR |
| 16 | Alternate homedir to be used by the application. Homedir must be owned by the user. |
| 17 | .TP |
| 18 | \fB\-t\ tmpdir |
| Yuri Chornoivan | f032946 | 2018-06-30 13:51:24 +0300 | [diff] [blame] | 19 | Use alternate temporary directory to mount on /tmp. tmpdir must be owned by the user. |
| Eric Paris | 3c5abbc | 2011-08-15 13:56:02 -0400 | [diff] [blame] | 20 | .TP |
| Dan Walsh | 149afc6 | 2011-06-13 13:24:38 -0400 | [diff] [blame] | 21 | \fB\-C --capabilities\fR |
| 22 | Allow apps executed within the namespace to use capabilities. Default is no capabilities. |
| 23 | .TP |
| Dan Walsh | e8575bf | 2011-07-06 20:22:26 -0400 | [diff] [blame] | 24 | \fB\-k --kill\fR |
| 25 | Kill all processes with matching MCS level. |
| 26 | .TP |
| Eric Paris | 3c5abbc | 2011-08-15 13:56:02 -0400 | [diff] [blame] | 27 | \fB\-Z\ context |
| Laurent Bigonville | 8586ee5 | 2016-05-01 20:18:03 +0200 | [diff] [blame] | 28 | Use alternate SELinux context while running the executable. |
| Eric Paris | 3c5abbc | 2011-08-15 13:56:02 -0400 | [diff] [blame] | 29 | .TP |
| 30 | \fB\-v\fR |
| 31 | Verbose output |
| 32 | .SH "SEE ALSO" |
| 33 | .TP |
| 34 | runcon(1), sandbox(8), selinux(8) |
| 35 | .PP |
| 36 | .SH AUTHOR |
| 37 | This manual page was written by |
| 38 | .I Dan Walsh <dwalsh@redhat.com> |
| 39 | and |
| 40 | .I Thomas Liu <tliu@fedoraproject.org> |