SEUNSHARE(8)

💅 seunshare(8) — like, the whole entire manual page, bestie

okay so. welcome to seunshare, a user command, section 8. yes i'm giving you the whole thing. no cap. 🎀

---

✨ NAME ✨

seunshare — run cmd with an alternate homedir, tmpdir and/or SELinux context 🦋

---

🌸 SYNOPSIS 🌸

seunshare [ -v ] [ -C ] [ -k ] [ -t tmpdir ] [ -h homedir ] [ -Z context
] -- executable [args]

---

👑 DESCRIPTION 👑

So here's the tea ☕ — you run that executable inside the context you picked, with a custom home directory and a custom /tmp directory. The way it works is genuinely iconic: seunshare unshares from the default namespace first, then mounts the homedir and tmpdir you specified over the default homedir and /tmp. And finally — the main character moment — it tells the kernel to execute the application under the SELinux context you gave it. periodt. 💅

• -h homedir — alternate homedir that the application is gonna use. bestie, the homedir must be owned by the user. no exceptions, we don't make the rules 😭
• -t tmpdir — use an alternate temporary directory and mount it on /tmp. same deal: tmpdir must be owned by the user. ✨
• -r runuserdir — use an alternate temporary directory and mount it on XDG_RUNTIME_DIR (that's /run/user/$UID for the uninitiated 🫶). and yeah, runuserdir must be owned by the user too. the ownership checks are non-negotiable, i fear.
• -C, --capabilities — lets apps executed inside the namespace actually use capabilities. the default? no capabilities. so if you want them, you gotta ask. 🎀
• -k, --kill — kills all processes with a matching MCS level. it's giving cleanup, it's giving closure 💀
• -Z context — use an alternate SELinux context while running the executable. slay. 🔥
• -v — verbose output, so you can see everything happening in real time. we love a transparent queen 👑

---

🌈 EXAMPLE 🌈

run bash with a temporary /home and /tmp directory, like so:

# USERHOMEDIR=`mktemp -d /tmp/home.XXXXXX`; USERTEMPDIR=`mktemp -d /tmp/temp.XXXXXX`
# seunshare -v -h ${USERHOMEDIR} -t ${USERTEMPDIR} -- /bin/bash

---

🦋 SEE ALSO 🦋

runcon(1), sandbox(8), selinux(8)

go read those too, i'm literally obsessed with cross-referencing 🫶

---

💜 AUTHOR 💜

this manual page was written by Dan Walsh <dwalsh@redhat.com> and Thomas Liu <tliu@fedoraproject.org> — legends, honestly. 👑

---

and that's a wrap on seunshare, page seunshare, from way back in May 2010 (yes, it's been serving looks since 2010 💖). bye bestie, go unshare something responsibly! 🎀✨