mirror-cockpit-project-cockpit/doc/modules/guide/pages/feature-selinux.adoc

18 lines
480 B
Text
Raw Normal View History

[[feature-selinux]]
= SELinux Policy
If present on the system Cockpit can set the SELinux mode to enforcing
or permissive. It can also use `+setroubleshootd+` to show audit issues
and apply suggested fixes.
To perform similar tasks from the command line use the `+setenforce+`
and `+sealert+` tools.
To clear out all the information that `+setroubleshootd+` tracks, you
can use a commands like:
....
$ sudo killall setroubleshootd
$ sudo rm -rf /var/lib/setroubleshoot/*
....