sam.hadow/server-doc
SHA256
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update selinux commands

Browse Source
This commit is contained in:
Sam Hadow 2025-02-22 21:27:03 +01:00
parent 770cb7d29e
commit 09320e25a0
1 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
selinux.md
View File

@ -27,3 +27,24 @@ apply change
Relabeled /usr/bin/file from unconfined_u:object_r:bin_t:s0 to system_u:object_r:bin_t:s0 Relabeled /usr/bin/file from unconfined_u:object_r:bin_t:s0 to system_u:object_r:bin_t:s0
# restorecon -R for recursive # restorecon -R for recursive
``` ```
## Containers
### volumes
` :z ` shared content label
` :Z ` private unshared label
` :ro,z ` combine read only and SElinux label
### udica
[git](https://github.com/containers/udica)
```
$ podman inspect $(podman ps -f name=<container name> -q) > container.json
# udica -j container.json my_container
```
## denied access
see recent denials
```
# ausearch -m avc -ts recent
```