2025-12-02 03:08:41 -09:00
|
|
|
[[feature-selinux]]
|
2025-12-02 03:16:34 -09:00
|
|
|
= SELinux Policy
|
2025-12-02 03:08:41 -09:00
|
|
|
|
|
|
|
|
If present on the system Cockpit can set the SELinux mode to enforcing
|
2025-12-02 03:16:34 -09:00
|
|
|
or permissive. It can also use `+setroubleshootd+` to show audit issues
|
2025-12-02 03:08:41 -09:00
|
|
|
and apply suggested fixes.
|
|
|
|
|
|
2025-12-02 03:16:34 -09:00
|
|
|
To perform similar tasks from the command line use the `+setenforce+`
|
|
|
|
|
and `+sealert+` tools.
|
2025-12-02 03:08:41 -09:00
|
|
|
|
2025-12-02 03:16:34 -09:00
|
|
|
To clear out all the information that `+setroubleshootd+` tracks, you
|
|
|
|
|
can use a commands like:
|
2025-12-02 03:08:41 -09:00
|
|
|
|
|
|
|
|
....
|
|
|
|
|
$ sudo killall setroubleshootd
|
|
|
|
|
$ sudo rm -rf /var/lib/setroubleshoot/*
|
|
|
|
|
....
|