--- Author: Kristof Vandam Categories: - administration Date: 2018-10-03T10:08:15+02:00 Draft: true Tags: - linux - security - selinux Title: Selinux 101 Truncated: true --- A brief overview about selinux, what can it do and how to manage. ## Context Types source context (scontext), for example processes destination context (tcontenxt), for example, files, directories, ports semanage -a add -d delete -l list -t context type ### Examples #### Add a default context to a directory ## Booleans setsebool getsebool ## Debugging ### /var/log/audit/audit.log avc: denied access vector control ### /var/log/messages setroubleshoot more human readable errors -> only available when setroubleshoot-server package is installed ### sealert /var/log/messages suggest running a sealert command for more information suggests fixes! :)