1failsafe_context(5)          SELinux configuration         failsafe_context(5)
2
3
4

NAME

6       failsafe_context - The SELinux fail safe context configuration file
7

DESCRIPTION

9       The  failsafe_context  file  allows  SELinux-aware applications such as
10       PAM(8) to obtain a known valid login context for an administrator if no
11       valid default entries can be found elsewhere.
12
13       selinux_failsafe_context_path(3)  will return the active policy path to
14       this file. The default failsafe context file is:
15              /etc/selinux/{SELINUXTYPE}/contexts/failsafe_context
16
17       Where {SELINUXTYPE} is the entry from the  selinux  configuration  file
18       config (see selinux_config(5)).
19
20       The  following  functions read this file from the active policy path if
21       they cannot obtain a default context:
22              get_default_context(3)
23              get_ordered_context_list(3)
24              get_ordered_context_list_with_level(3)
25              get_default_context_with_level(3)
26              get_default_context_with_role(3)
27              get_default_context_with_rolelevel(3)
28              query_user_context(3)
29              manual_user_enter_context(3)
30

FILE FORMAT

32       The file consists of a single line entry as follows:
33              role:type[:range]
34
35       Where:
36              role type range
37                     A role, type and optional range (for MCS/MLS),  separated
38                     by  colons  (:) to form a valid login process context for
39                     an administrator to access the system.
40

EXAMPLE

42       # ./contexts/failsafe_context
43       unconfined_r:unconfined_t:s0
44

SEE ALSO

46       selinux(8), selinux_failsafe_context_path(3), PAM(8),
47       selinux_default_type_path(3), get_default_context(3),
48       get_ordered_context_list(3), get_ordered_context_list_with_level(3),
49       get_default_context_with_level(3), get_default_context_with_role(3),
50       get_default_context_with_rolelevel(3), query_user_context(3),
51       manual_user_enter_context(3), selinux_config(5)
52
53
54
55Security Enhanced Linux           28-Nov-2011              failsafe_context(5)