Your company here — click to reach over 10,000 unique daily visitors

runcon - Man Page

run command with specified security context

Examples (TL;DR)


runcon CONTEXT COMMAND [args]
runcon [ -c ] [-u USER] [-r ROLE] [-t TYPE] [-l RANGE] COMMAND [args]


Run COMMAND with completely-specified CONTEXT, or with current or transitioned security context modified by one or more of LEVEL, ROLE, TYPE, and USER.

If none of -c, -t, -u, -r, or -l, is specified, the first argument is used as the complete context.  Any additional arguments after COMMAND are interpreted as arguments to the command.

Only carefully-chosen contexts are likely to run successfully.

Run a program in a different SELinux security context. With neither CONTEXT nor COMMAND, print the current security context.

Mandatory arguments to long options are mandatory for short options too.


Complete security context

-c,  --compute

compute process transition context before modifying

-t,  --type=TYPE

type (for same role as parent)

-u,  --user=USER

user identity

-r,  --role=ROLE


-l,  --range=RANGE



display this help and exit


output version information and exit

Exit status


if the runcon command itself fails


if COMMAND is found but cannot be invoked


if COMMAND cannot be found


the exit status of COMMAND otherwise


Written by Russell Coker.

Reporting Bugs

GNU coreutils online help: <https://www.gnu.org/software/coreutils/>
Report any translation bugs to <https://translationproject.org/team/>

See Also

Full documentation <https://www.gnu.org/software/coreutils/runcon>
or available locally via: info '(coreutils) runcon invocation'

Referenced By

newrole(1), sandbox(8), setpriv(1), seunshare(8).

July 2024 GNU coreutils 9.5