CentOS 7 SELinux

Security Enhanced Linux (SELinux)

Determine selinux status: sestatus

View selinux contexts for files: ls –lZ

Set Selinux mode to permissive: setenforce permissive

Reset directory Selinux contexts to default for a path: restorecon –F /path

Get SeLinux Boolean settings: getsebool –a

Set a Boolean permanently: setsebool booleanname on\off -P

See Booleans with a brief explanation of what they do: semanage Boolean -l

Search audit logs: ausearch –m avc –c TermToSearchFor

Alternate, friendlier option: sealer –a /var/log/audit/audit.log

GUI selinux tool: system-config-selinux

Close Menu
×
×

Cart