Wiki

SELinux is pretty complicated kernel software.

It takes time to fix errors.

Use the following tools to find and debug SELinux policy problems (refer to your local man pages):

• ps -Z -p PID
• ls -Z fileName
• ausearch
• restorecon
• semodule
• audit2allow
• Log files: /var/log/audit/audit.log and /var/log/setroubleshoot/setroubleshootd.log

Recommended readings:

• Introduction to the Red Hat SELinux Guide