core...inux(8)
πΈ NAME πΈ
Okay bestie, welcome to the core...inux(8) page for SELinux Policy coreos_liveiso_autologin_generator π The star of the show is coreos_liveiso_autologin_generator_selinux β Security Enhanced Linux Policy for the coreos_liveiso_autologin_generator processes. That's the whole main-character energy here, and every type, path, bool, and caveat is coming with us π«Ά
β¨ DESCRIPTION β¨
Security-Enhanced Linux secures the coreos_liveiso_autologin_generator processes via flexible mandatory access control. Periodt. π₯
The coreos_liveiso_autologin_generator processes execute with the coreos_liveiso_autologin_generator_t SELinux type. Wanna check if you've got these processes running? Execute the ps command with the -Z qualifier, bestie. Like this:
ps -eZ | grep coreos_liveiso_autologin_generator_t
That's the vibe check π
π¦ ENTRYPOINTS π¦
The coreos_liveiso_autologin_generator_t SELinux type can be entered via the coreos_liveiso_autologin_generator_exec_t file type. β¨
The default entrypoint paths for the coreos_liveiso_autologin_generator_t domain are the following:
/usr/lib/systemd/system-generators/coreos-liveiso-autologin-generator
π PROCESS TYPES π
SELinux defines process types (domains) for each process running on the system. You can see the context of a process using the -Z option to ps π
Policy governs the access confined processes have to files. SELinux coreos_liveiso_autologin_generator policy is very flexible, allowing users to setup their coreos_liveiso_autologin_generator processes in as secure a method as possible. No cap.
The following process types are defined for coreos_liveiso_autologin_generator:
coreos_liveiso_autologin_generator_t
Note:semanage permissive -a coreos_liveiso_autologin_generator_tcan be used to make the process typecoreos_liveiso_autologin_generator_tpermissive. SELinux does not deny access to permissive process types, but the AVC (SELinux denials) messages are still generated. π
π BOOLEANS π
SELinux policy is customizable based on least access required. The coreos_liveiso_autologin_generator policy is extremely flexible and has several booleans that allow you to manipulate the policy and run coreos_liveiso_autologin_generator with the tightest access possible. Iconic. π
If you want to allow all domains to execute in fips_mode, you must turn on the fips_mode boolean. Enabled by default.
setsebool -P fips_mode 1
π FILE CONTEXTS π
SELinux requires files to have an extended attribute to define the file type. You can see the context of a file using the -Z option to ls π
Policy governs the access confined processes have to these files. SELinux coreos_liveiso_autologin_generator policy is very flexible allowing users to setup their coreos_liveiso_autologin_generator processes in as secure a method as possible.
π§ STANDARD FILE CONTEXT π§
SELinux defines the file context types for the coreos_liveiso_autologin_generator. If you wanted to store files with these types in a different paths, you need to execute the semanage command to specify alternate labeling and then use restorecon to put the labels on disk. Slay. π
semanage fcontext -a -t coreos_liveiso_autologin_generator_exec_t '/srv/coreos_liveiso_autologin_generator/content(/.*)?'
restorecon -R -v /srv/mycoreos_liveiso_autologin_generator_content
Note: SELinux often uses regular expressions to specify labels that match multiple files. iykyk. π
The following file types are defined for coreos_liveiso_autologin_generator:
coreos_liveiso_autologin_generator_exec_tβ set files with thecoreos_liveiso_autologin_generator_exec_ttype if you want to transition an executable to thecoreos_liveiso_autologin_generator_tdomain. π₯coreos_liveiso_autologin_generator_unit_file_tβ set files with thecoreos_liveiso_autologin_generator_unit_file_ttype if you want to treat the files as coreos liveiso autologin generator unit content. π
Note: File context can be temporarily modified with thechconcommand. If you want to permanently change the file context you need to use thesemanage fcontextcommand. This will modify the SELinux labeling database. You will need to userestoreconto apply the labels. π
π COMMANDS π
semanage fcontextcan also be used to manipulate default file context mappings. πsemanage permissivecan also be used to manipulate whether or not a process type is permissive. πsemanage modulecan also be used to enable/disable/install/remove policy modules. πsemanage booleancan also be used to manipulate the booleans. πsystem-config-selinuxis a GUI tool available to customize SELinux policy settings. π
π«Ά AUTHOR π«Ά
This manual page was auto-generated using sepolicy manpage . π«Ά
π SEE ALSO π
selinux(8)coreos_liveiso_autologin_generator(8)semanage(8)restorecon(8)chcon(1)sepolicy(8)setsebool(8)
Okay that's a wrap, bestie! π The source/version is coreos_liveiso_autologin_generator, the date is 26-10-06, and the manual is core...inux(8). Go keep those labels iconic πβ¨
π¦ where this page comes from
- opensuse-leap 16.0: selinux-policy-doc 20250627+git412.dbf877ab7-160000.1.1 Β· GPL-2.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms