You need to know this command in case of issues.See the SELinux attributes that applies to a running process:.finally s0 means the level or category of that object. where system_u: is the user (not always a user of the system), object_r: role and httpd_config_t: is the object type, other objects can be a directory, a port or socket and types of an object can be a config file, log file, etc.-rw-r–r–. root root system_u:object_r:httpd_config_t:s0 /etc/nginx/nf.ls -ltraZ # most important here is the Z.See the extended attributes in the file system that SELinux use:.the perl command is to convert the Epoch time (or UNIX or POSIX time) inside the audit.log file to human readable time.Check /var/log/audit/audit.log and look for lines with “denied”. Forget about that, you have to check the proper place to see what is going on with it: the Audit logs. When you are configuring and installing a service or application on a server and something is not working as expected, not starting as it should to, you always think “Damn SELinux, let’s disable it”. Therefore, in case something in your system is not working properly or in the same manner as with SELinux disabled. Get to know what is going on: Dealing with SELinux happens mostly during installation, configuration and tests of Linux services.from setroubleshoot-server package we will use sealert to easily identify issues.setools-console comes with seinfo, sesearch and sechecker among others.policycoreutils-python comes with the great semanage command, the lord of the SELinux commands.yum install -y setools-console policycoreutils-python setroubleshoot-server.To do cool things you need cool tools, we will need some of them:
0 kommentar(er)
