SELinux

SELinux mandatory access control reference. Real commands, real configs, real troubleshooting.

Commands

Command	Description
`intro`	What is SELinux, MAC vs DAC, NSA origin
`modes`	Enforcing/permissive/disabled, getenforce/setenforce
`contexts`	Security contexts user:role:type:level, ls -Z, ps -Z
`booleans`	getsebool/setsebool, common booleans
`policy`	Targeted vs MLS, policy modules, semodule
`troubleshoot`	audit2why, sealert, setroubleshoot
`file-labels`	chcon, restorecon, semanage fcontext
`ports`	semanage port, adding custom ports

Installs

Source

First Seen

Apr 23, 2026