#SELinux Troubleshooting

Показать описание

#SELinux Troubleshooting | selinux tutorial for beginners | selinux Explained

Identify the Problem - SELinux Audits
Using ausearch and sealert
Using audit2allow Utility
SELinux Troubleshoot Browser
The setroubleshootd
Installation, configuration and working
Sending e-mails
Testing setroubleshoot functionality
Binding sshd on a non standard port
SELinux Logging - Interacting with systemd-journal
Policy Rules V/s other Options
# ausearch -m AVC,USER_AVC,SELINUX_ERR -ts today
The audit2allow utility gathers information from logs of denied operations and then generates SELinux policy-allow rules. For example:
To produce a human-readable description of why the access was denied:
# audit2allow -w -a
To view the type enforcement rule that allows the denied access:
# audit2allow -a
To create a custom module:
# audit2allow -a -M mypolicy