SELinux - Revision history

Xbl: /* SELinux */

2022-05-14T18:09:29Z

SELinux

← Older revision		Revision as of 20:09, 14 May 2022
Line 2:		Line 2:

	Example:</br>		Example:</br>
	<code>semanage fcontext -a -s SEUSER -t TYPE '/tmp/d1/(/.*)?'</code>		<code>semanage fcontext -a -s SEUSER -t TYPE '/tmp/d1(/.*)?'</code>

	<code>(/.*)?</code> include all subdirectories and files (semanage)</br>		<code>(/.*)?</code> include all subdirectories and files (semanage)</br>

Xbl: /* SELinux */

2022-05-14T15:38:45Z

SELinux

← Older revision		Revision as of 17:38, 14 May 2022
Line 2:		Line 2:

	Example:</br>		Example:</br>
	<code>semanage fcontext -a -s SEUSER -t TYPE '/tmp/d1/(/*)?'</code>		<code>semanage fcontext -a -s SEUSER -t TYPE '/tmp/d1/(/.*)?'</code>

	<code>(/.*)?</code> include all subdirectories and files (semanage)</br>		<code>(/.*)?</code> include all subdirectories and files (semanage)</br>

Xbl at 15:07, 7 May 2022

2022-05-07T15:07:31Z

← Older revision		Revision as of 17:07, 7 May 2022
Line 1:		Line 1:
	= SELinux =		= SELinux =

			Example:</br>
			<code>semanage fcontext -a -s SEUSER -t TYPE '/tmp/d1/(/*)?'</code>

			<code>(/.*)?</code> include all subdirectories and files (semanage)</br>
			same as </br>
			<code>-R</code> with chcon

	== Available Commands ==		== Available Commands ==
Line 26:		Line 33:
	<code>setsebool</code> modify booleans temporarily or in policy database</br>		<code>setsebool</code> modify booleans temporarily or in policy database</br>
	<code>semanage boolean</code> modify boolean values in policy database</br>		<code>semanage boolean</code> modify boolean values in policy database</br>

			=== Port Management ===

			<code>semanage port</code> manage network ports</br>

	=== Troubleshooting ===		=== Troubleshooting ===

	<code>sealert</code> graphical troubleshooting tool		<code>sealert</code> graphical troubleshooting tool

Xbl: Created page with "= SELinux = == Available Commands == === Mode Management === `sestatus` show runtime status and boolean values (-b)
`getenforce` show current mode of operation
`setenforce` switch operating mode temporarily
=== Context Management === `chcon` change file contexts (does not survive file system relabeling)
`restorecon` restore default file contexts, referencing /etc/selinux/targeted/contexts/fil..."

2022-05-07T14:54:18Z

Created page with "= SELinux = == Available Commands == === Mode Management === <code>sestatus</code> show runtime status and boolean values (-b) <code>getenforce</code> show current mode of operation <code>setenforce</code> switch operating mode temporarily === Context Management === <code>chcon</code> change file contexts (does not survive file system relabeling) <code>restorecon</code> restore default file contexts, referencing /etc/selinux/targeted/contexts/fil..."

New page

= SELinux =

== Available Commands ==

=== Mode Management ===

<code>sestatus</code> show runtime status and boolean values (-b)
<code>getenforce</code> show current mode of operation
<code>setenforce</code> switch operating mode temporarily

=== Context Management ===

<code>chcon</code> change file contexts (does not survive file system relabeling)
<code>restorecon</code> restore default file contexts, referencing /etc/selinux/targeted/contexts/files
<code>semanage fcontext</code> change file contexts (survives file system relabeling)

=== Policy Management ===

<code>seinfo</code> show info about policy components
<code>semanage</code> manage policy database
<code>sesearch</code> search rules in policy database

=== Boolean Management ===

<code>getsebool</code> display booleans and their settings
<code>setsebool</code> modify booleans temporarily or in policy database
<code>semanage boolean</code> modify boolean values in policy database

=== Troubleshooting ===

<code>sealert</code> graphical troubleshooting tool