GENHOMEDIRCON(8)

💖 GENHOMEDIRCON 💖

okay bestie, welcome to genhomedircon(8) — yes it's in the SELinux section 8 manual, and yes it's giving main character energy ✨

🌸 NAME 🌸

genhomedircon — generate SELinux file context configuration entries for user home directories 🏠

✨ DESCRIPTION ✨

so genhomedircon is a script, right? and what it does is it runs semodule to rebuild the currently active SELinux policy — but without reloading it 💀 — and then it creates the labels for each user home directory based on the directory paths that come back from calls to getpwent().

ngl that second part? it depends on the "usepasswd" parameter being set to "true" in /etc/selinux/semanage.conf. and guess what — "true" is the default 🎀

fr fr, if that's not set how you want it, the home-dir labeling just won't vibe the way you expect.

this script is usually executed by semanage 👑 but that default behavior can be optionally modified by setting "disable-genhomedircon" to "true" in /etc/selinux/semanage.conf. slay, you have options.

and if there are directories you want kept OUT of the home directory list? you exclude them with the "ignoredirs" setting in /etc/selinux/semanage.conf. periodt 🦋

💅 AUTHOR 💅

This manual page was written by Dan Walsh <dwalsh@redhat.com> — iconic, we stan 💜

🔥 SEE ALSO 🔥

• semanage.conf(5)
• semodule(8)
• semanage(8)
• getpwent(3)
• getpwent_r(3)

and that's the whole page bestie!! 🫶 this one's from Security Enhanced Linux, dated Sep 2011 — yeah, a lil vintage, but she still eats 💖✨ no cap.