Used by snapper(8) for filesystem snapshot management. Signed-off-by: Richard Haines <richard_c_haines@xxxxxxxxxxxxxx> --- src/policy_config_files.md | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/src/policy_config_files.md b/src/policy_config_files.md index 9f2996c..ffc4fac 100644 --- a/src/policy_config_files.md +++ b/src/policy_config_files.md @@ -816,10 +816,25 @@ db_schema *.* system_u:object_r:sepgsql_schema_t:s0 ## *contexts/snapperd_contexts* -**To be determined** +Used by ***snapper**(8)* for filesystem snapshot management to set an SELinux +context on ***btrfs**(8)* subvolumes. **The file format is as follows:** +``` +snapperd_data = user:role:type[:range] +``` + +**Where:** + +*snapperd_data* + +- The keyword *snapperd_data* + +*user:role:type[:range]* + +- The security context including the MLS / MCS *level* or *range* if applicable. + **Example file contents:** ``` -- 2.33.1
