===== Ubuntu - SELinux - Troubleshooting SELinux Policy Errors =====

SELinux is pretty complicated kernel software.

It takes time to fix errors.

Use the following tools to find and debug SELinux policy problems (refer to your local man pages):

  * ps -Z -p PID
  * ls -Z fileName
  * ausearch
  * restorecon
  * semodule
  * audit2allow
  * Log files: /var/log/audit/audit.log and /var/log/setroubleshoot/setroubleshootd.log

----

Recommended readings:

  * [[https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Security-Enhanced_Linux/index.html|Introduction to the Red Hat SELinux Guide]]