CHLABEL(1)                                                          CHLABEL(1)



NAME
     chlabel - change the label of a file

SYNOPSIS
     chlabel [ -f ] label [ path ... ]
     chlabel [ -f ] -m path

DESCRIPTION
     chlabel resets the security labels of the files specified by the listed
     path arguments to the value specified by label.  Unprivileged users may
     only specify a label that is equal to that of their current process
     label.  A user with CAP_MAC_UPGRADE capability may specify a label that
     is more sensitive or of lower integrity than the current process label. A
     user with CAP_MAC_DOWNGRADE capability may specify a label that is less
     sensitive or of higher integrity than the current process label. A user
     with CAP_FOWNER capability may change the label of a file that is not
     owned by that user.  The superuser may do any of these things.

     The chlabel command has the following options:

     -f   A user with CAP_MAC_RELABEL_OPEN capability may use this option to
          change the label of an open file, or specify a label with equal
          sensitivity or integrity. This option should be used with care.

     -m   Make a file's label moldy.  This option only applies to directories,
          and causes them to perform multi-level redirection of pathname
          lookups. A label is not specified when using the -m option.

SEE ALSO
     chcap(1), chgrp(1), chmod(1), mac_set(2), su(1M).

























                                                                        Page 1