SELinux policy without requiring modification to or recompilation
from policy sources. semanage user controls the mapping between an SELinux User and the roles and MLS/MCS levels.
.SH"OPTIONS"
.TP
.I\-h,\-\-help
show this help message and exit
.TP
.I\-n,\-\-noheading
Do not print heading when listing the specified object type
.TP
.I\-N,\-\-noreload
Do not reload policy after commit
.TP
.I\-SSTORE,\-\-storeSTORE
Select an alternate SELinux Policy Store to manage
.TP
.I\-C,\-\-locallist
List local customizations
.TP
.I\-a,\-\-add
Add a record of the specified object type
.TP
.I\-d,\-\-delete
Delete a record of the specified object type
.TP
.I\-m,\-\-modify
Modify a record of the specified object type
.TP
.I\-l,\-\-list
List records of the specified object type
.TP
.I\-E,\-\-extract
Extract customizable commands, for use within a transaction
.TP
.I\-D,\-\-deleteall
Remove all local customizations
.TP
.I\-LLEVEL,\-\-levelLEVEL
Default SELinux Level for SELinux user, s0 Default. (MLS/MCS Systems only)
.TP
.I\-rRANGE,\-\-rangeRANGE
MLS/MCS Security Range (MLS/MCS Systems only) SELinux Range for SELinux login mapping defaults to the SELinux user record range. SELinux Range for SELinux user defaults to s0.
.TP
.I\-R[ROLES],\-\-roles[ROLES]
SELinux Roles. You must enclose multiple roles within quotes, separate by spaces. Or specify \-R multiple times.
.SHEXAMPLE
.nf
List SELinux users
# semanage user \-l
Modify groups for staff_u user
# semanage user \-m \-R "system_r unconfined_r staff_r" staff_u