User Tools

Site Tools


ubuntu:selinux:check_that_selinux_is_not_denying_actions

Ubuntu - SELinux - Check that SELinux is not denying actions

Type the following command to confirm that SELinux did not deny actions during the reboot:

grep "SELinux is preventing" /var/log/messages

If you get any output/error, try using the chcon command. It can be used to change SELinux security context of a file. However, it is recommended that you relabel the complete filesystem. Type the following command to restore default security contexts for /home:

restorecon -Rv -n /home

You can run this on root (/) file system too:

restorecon -Rv -n /

Do not skip this step. Type the following commands:

# touch /.autorelabel
# reboot

It will take some time to relabel the complete filesystem. If you get any errors or common services mysqld or sshd failed, try the following solution (go to a single user mode):

# init 1
# genhomedircon
# touch /.autorelabel
# reboot
ubuntu/selinux/check_that_selinux_is_not_denying_actions.txt · Last modified: 2020/07/15 10:30 by 127.0.0.1

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki