default_type(5)

💖 default_type(5) — the SELinux default type config file 💖

okay bestie, so this is a section 5 page (that's file formats, iykyk) from the SELinux configuration corner of the manual, and the file it's about is literally called default_type. no cap, it's a whole little config file that tells SELinux which type to grab when nobody said which one. 🎀

✨ NAME ✨

default_type — the SELinux default type configuration file 🌸

🦋 DESCRIPTION 🦋

so the default_type file is just a little list of entries, and its whole job is letting SELinux-aware applications — like newrole(1), hi bestie — pick a default type for a role when nobody actually supplied one. it's giving "backup plan but make it policy". 💅

selinux_default_type_path(3) is the one that'll hand you the active policy path to this file. and the default, default type file (yes, that many defaults) lives at:

/etc/selinux/{SELINUXTYPE}/contexts/default_type

where {SELINUXTYPE} is literally the entry pulled from the selinux configuration file config (peep selinux_config(5) for that whole situation 👀).

and then get_default_type(3) reads this file to figure out a type for the active policy. that's the whole vibe. 🌈

🎀 FILE FORMAT 🎀

every single line inside the default_type file is formatted with role:type entries, where:

• role — the SELinux role. periodt.
• type — the domain type that gets returned for this role. ✨

💜 EXAMPLE 💜

# ./contexts/default_type
auditadm_r:auditadm_t
user_r:user_t

slay. two lines, two roles, done. 👑

⭐ SEE ALSO ⭐

• selinux(8)
• get_default_type(3)
• newrole(1)
• selinux_default_type_path(3)
• selinux_config(5)

🫶 reminder bestie: {SELINUXTYPE} isn't a real directory name, it's a placeholder — swap in whatever your config file says. don't go typing braces into your filesystem, I'm begging 😭

and that's the page!! written by Security Enhanced Linux, dated 28-Nov-2011, and it's page default_type(5) ofc. mwah, go configure responsibly 💖✨🎀