/usr/share/doc/cockpit/guide/feature-selinux.html is in cockpit-doc 164-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 | <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>SELinux Policy</title>
<meta name="generator" content="DocBook XSL Stylesheets V1.79.1">
<link rel="home" href="index.html" title="Cockpit Guide">
<link rel="up" href="features.html" title="Part II. Feature Internals">
<link rel="prev" href="feature-machines.html" title="Multiple Machines">
<link rel="next" href="feature-tuned.html" title="Tuned Profiles">
<link rel="stylesheet" href="style.css" type="text/css">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<table class="navigation" id="top" width="100%" summary="Navigation header" cellpadding="2" cellspacing="2"><tr valign="middle">
<td><a accesskey="p" href="feature-machines.html"><img src="left.png" width="24" height="24" border="0" alt="Prev"></a></td>
<td><a accesskey="u" href="features.html"><img src="up.png" width="24" height="24" border="0" alt="Up"></a></td>
<td><a accesskey="h" href="index.html"><img src="home.png" width="24" height="24" border="0" alt="Home"></a></td>
<th width="100%" align="center">Cockpit Guide</th>
<td><a accesskey="n" href="feature-tuned.html"><img src="right.png" width="24" height="24" border="0" alt="Next"></a></td>
</tr></table>
<div class="chapter">
<div class="titlepage"><div><div><h2 class="title">
<a name="feature-selinux"></a>SELinux Policy</h2></div></div></div>
<p>If present on the system Cockpit can set the SELinux mode to enforcing or permissive.
It can also use <code class="code">setroubleshootd</code> to show audit issues and apply suggested
fixes.</p>
<p>To perform similar tasks from the command line use the <code class="code">setenforce</code> and
<code class="code">sealert</code> tools.</p>
<p>To clear out all the information that <code class="code">setroubleshootd</code> tracks, you
can use a commands like:</p>
<pre class="programlisting">
$ <span class="command"><strong>sudo killall setroubleshootd</strong></span>
$ <span class="command"><strong>sudo rm -rf /var/lib/setroubleshoot/*</strong></span>
</pre>
</div>
<div class="footer"><hr></div>
</body>
</html>
|