REHL8: Manage SELinux

To see SELinux rule run

getsebool -a

pipe to filter for specifig rule or service

getsebool -a | grep httpd

Turn on or off an rule -P for persistant

sudo setsebool -P httpd_can_network_connect_db 1

To turn off / on SELinux run

sudo setenforce 1

Verify if SELinux is enabled

getenforce

To see SELinux logs

ausearch -m avc -ts today | audit2why

Leave a Reply

Your email address will not be published.