home blog portfolio Ian Fisher

SELinux cheatsheet

# view a file's context
$ secon --file FILE

# change a file's type to 'bin_t'
$ sudo chcon -t bin_t FILE

# see recent 'avc' (= denial) audit events
$ sudo ausearch -ts recent -m avc -i

See also