CHLABEL(1)							    CHLABEL(1)

NAME    [Toc]    [Back]

     chlabel - change the label	of a file

SYNOPSIS    [Toc]    [Back]

     chlabel [ -f ] label [ path ... ]
     chlabel [ -f ] -m path

DESCRIPTION    [Toc]    [Back]

     chlabel resets the	security labels	of the files specified by the listed
     path arguments to the value specified by label.  Unprivileged users may
     only specify a label that is equal	to that	of their current process
     label.  A user with CAP_MAC_UPGRADE capability may	specify	a label	that
     is	more sensitive or of lower integrity than the current process label. A
     user with CAP_MAC_DOWNGRADE capability may	specify	a label	that is	less
     sensitive or of higher integrity than the current process label. A	user
     with CAP_FOWNER capability	may change the label of	a file that is not
     owned by that user.  The superuser	may do any of these things.

     The chlabel command has the following options:

     -f	  A user with CAP_MAC_RELABEL_OPEN capability may use this option to
	  change the label of an open file, or specify a label with equal
	  sensitivity or integrity. This option	should be used with care.

     -m	  Make a file's	label moldy.  This option only applies to directories,
	  and causes them to perform multi-level redirection of	pathname
	  lookups. A label is not specified when using the -m option.

SEE ALSO    [Toc]    [Back]

     chcap(1), chgrp(1), chmod(1), mac_set(2), su(1M).


									PPPPaaaaggggeeee 1111