SELinux Notes

semanage

copy the standard audit log to a human readable log
# sealert -a /var/log/audit/audit.log > /path/to/mylogfile.txt

To check if SELinux is enabled: # getenforce

To temporarily enable/disable SELinux: # setenforce [1|0]

SELinux status tool: # sestatus

Configuration file: /etc/selinux/config

SELinux Related Commands:

  • setencorce
  • sestatus
  • chcon
  • runcon
  • restorecon
  • semanage
  • ausearch
  • audit2allow
  • audit2why
  • journalctl
  • setsebool
  • getsebool
  • id
  • My other SELinux related posts

    Useful Links