securetty_types(5)
π securetty_types β the SELinux secure tty type config file π
okay bestie, welcome to securetty_types(5), the manual page for the little config file that tells SELinux which ttys count as secure ttys. she's section 5, she's SELinux configuration, and she's lowkey iconic. let's get into it π«Ά
β¨ NAME β¨
securetty_types β The SELinux secure tty type configuration file
πΈ DESCRIPTION πΈ
so the securetty_types file is literally just a list of types associated with the secure tty type, and those types are defined in the policy for use by SELinux-aware applications. that's the whole gig. no cap π
if you need the path to the active policy's version of this file, selinux_securetty_types_path(3) will hand it over. the default securetty types file lives at:
/etc/selinux/{SELINUXTYPE}/contexts/securetty_types
and <pink>{SELINUXTYPE}</pink> is the entry you pull from the selinux configuration file config β go peek at selinux_config(5) if you need the deets π
now, selinux_check_securetty_context(3) is the one that actually reads this file, to figure out whether a given context is for a secure tty that's defined in the active policy. main character behaviour fr fr π₯
and SELinux-aware applications β like newrole(1) β use this info to check the status of a tty. so yeah, this tiny file is doing a lot of heavy lifting behind the scenes. respect her π
π FILE FORMAT π
every line in the file is made up of the following entry:
typeβ one or more type entries that are defined in the policy for secure tty devices. that's it, that's the line, she's simple and she ate β¨
π¦ EXAMPLE π¦
# ./contexts/securetty_types
sysadm_tty_device_t
user_tty_device_t
staff_tty_device_t
look at her go. three whole types, vibing in a file, minding her business π
π SEE ALSO π
selinux(8), selinux_securetty_types_path(3), newrole(1), selinux_check_securetty_context(3), selinux_config(5)
and that's the whole page, bestie!! this one came from Security Enhanced Linux, dated 28-Nov-2011 β yeah she's an older queen but she still serves π mwah, go read your tty types, ily π«Ά
π¦ where this page comes from
- alpine 3.24: libselinux-doc 3.10-r1 Β· Public-Domain
- centos-stream 10: libselinux-utils 3.11-3.el10 Β· LicenseRef-Fedora-Public-Domain
- centos-stream 9: libselinux-utils 3.6-5.el9 Β· Public Domain
- debian bookworm: selinux-utils 3.4-1+b6
- debian trixie: selinux-utils 3.8.1-1 Β· LicenseRef-public-domain
- fedora 43: libselinux-utils 3.9-5.fc43 Β· LicenseRef-Fedora-Public-Domain
- fedora 44: libselinux-utils 3.10-1.fc44 Β· LicenseRef-Fedora-Public-Domain
- fedora 44: libselinux-utils 3.11-2.fc44 Β· LicenseRef-Fedora-Public-Domain
- nixos 26.05: libselinux 3.10
- nixpkgs unstable: libselinux 3.11
- opensuse-leap 16.0: selinux-tools 3.8.1-160000.4.1 Β· SUSE-Public-Domain
- opensuse-leap 16.0: selinux-tools 3.8.1-160000.4.1 Β· SUSE-Public-Domain
- opensuse-leap 16.0: selinux-tools 3.8.1-160000.4.1 Β· SUSE-Public-Domain
- opensuse-leap 16.0: selinux-tools 3.8.1-160000.4.1 Β· SUSE-Public-Domain
- ubuntu jammy: selinux-utils 3.3-1build2
- ubuntu noble: selinux-utils 3.5-2ubuntu2 Β· LicenseRef-public-domain
- ubuntu noble: selinux-utils 3.5-2ubuntu2.1 Β· LicenseRef-public-domain
- ubuntu questing: selinux-utils 3.8.1-1build1
- ubuntu resolute: selinux-utils 3.9-4build1 Β· LicenseRef-public-domain
- ubuntu stonking: selinux-utils 3.11-2.1 Β· LicenseRef-public-domain
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms