This is an old revision of the document!

[CHEATSHEET] selinux

Binaries

Add path as binaries to allow execution

semanage fcontext -a -t bin_t '/app/bin/.*'

Change security context of files/folder

chcon -Rv -u system_u -t bin_t '/app/data/executable.sh'

List defined paths by context

 semanage fcontext --list

Networking

Allowing Access to a Port

semanage port -a -t http_port_t -p tcp 81

List port services

semanage port -l

Empty