Skip to main content

Techniques to Troubleshoot SELinux | Into the Terminal 103

The right response to an SELinux denial is to debug it, not turn it off. This episode is the troubleshooting toolkit.

What this episode covers:

  • Reading denials from the audit log with ausearch and sealert.
  • Fixing labels with restorecon and semanage fcontext.
  • Setting booleans or writing policy instead of going permissive.

Watch the full walkthrough above.