REHL8: Manage SELinux
To see SELinux rule run
getsebool -a
pipe to filter for specifig rule or service
getsebool -a | grep httpd
Turn on or off an rule -P for persistant
sudo setsebool -P httpd_can_network_connect_db 1
To turn off / on SELinux run
sudo setenforce 1
Verify if SELinux is enabled
getenforce
To see SELinux logs
ausearch -m avc -ts today | audit2why
Leave a Reply