Check what SELinux related rpms you have installed:.

Check the current state of SELinux on your system:Įxplanation troubleshooting basics and expectations.

Hand edit SELinux enforcement policy: ( requires a reboot) ( You can also use getfattr although, you need to specify -n linux) View SELinux file contexts on a given directory and the files within it: Note: Apache httpd files are served from /var/www/ on Centos for security reasons.ĭetermine why SELinux has denied an event: List currently installed SELinux modules:Ĭhcon -t httpd_sys_content_t -R /home/$foo Setsebool -P httpd_can_network_connect true Semanage port -a -t http_port_t -p tcp 8081įix http proxy connect error: ( for a list of other SELinux booleans see: getsebool) System-config-securitylevel-tui – Rudimentary tool for enabling/disabling/configuring SELinux and IPtables. Setroubleshoot – GUI troubleshooting tool / daemon. Setsebool – Tool for setting/toggling SELinux booleans. Setenforce – Tool for setting the SELinux enforcement state. Sestatus – Tool for retrieving the current SELinux status. Semodule – Tool for manipulating SELinux modules. Semanage – Tool for managing SELinux policy mappings. Restorecon – Tool for reverting files back to the default labels. Matchpathcon – This is a simple tool that takes files/directories and prints the default security context of the files. Getsebool – Tool for getting SELinux boolean values.

Getenforce – Tool for getting the SELinux enforcement state. Common SELinux related commands in alphabetical order:Īusearch – SELinux audit log search tool.Īudit2allow – Generate SELinux policy allow rules from logs of denied operations.Īudit2why – Determine which component of your policy caused a denial.Ĭhcon – Tool for changing the SELinux context of files and directories.įixfiles – Fixfiles is a shell script that wraps setfiles and restorecon.Some spare time to read and experiment.īasic description of what will be done and what is expected.Root or appropriate sudo access to the system in question.Common SELinux troubleshooting techniques, commands and syntax.

Linux yum install setools reboot