Definitely 'chcon' and probably next to 'semanage,' among others. The latter is really a tool that changes a lot of the policies, from file contexts to boolean and other things.
E.g., Most people 'get hurt' on a 're-label'** because they didn't change the policies, and ran chcon and setsebool. - bjs **P.S. Nothing makes me cringe more than when people say "Disable SELinux, you can always re-label the system later." -- Sent from my Essential PH-1, please excuse any typos Bryan J Smith - http://linkedin.com/in/bjsmith On Mon, Apr 1, 2019, 05:38 Fabian Thorns <[email protected]> wrote: > Hi Marc, > > On Fri, Mar 22, 2019 at 2:05 PM Marc Baudoin <[email protected]> > wrote: > >> I can't find the togglesebool command on CentOS 7. It's not that >> useful anyway. Should it be dropped? Same goes for >> seaudit-report. >> > > togglesebool is included in all Debian releases, including sid, but I > agree, it might be better to focus on Distributions which endorse SELinux a > little more. Although it's not a complicated tool, so I wouldn't mind > keeping it for now. seaudit-report seems to be gone, it was removed from > the objectives. Good catch! > > > >> On the other hand, the chcon command is not listed in the >> objectives. I find it useful. Should it be added? >> > > It probably should, it's in the objectives now. > > Fabian > _______________________________________________ > lpi-examdev mailing list > [email protected] > https://list.lpi.org/mailman/listinfo/lpi-examdev
_______________________________________________ lpi-examdev mailing list [email protected] https://list.lpi.org/mailman/listinfo/lpi-examdev
