selinux

name	selinux
version	1.0.0
description	SELinux mandatory access control reference. Enforcing/permissive modes, security contexts, booleans, policy modules, file labeling, port management, and troubleshooting with audit2why and sealert.
author	BytesAgain
homepage	https://bytesagain.com
source	https://github.com/bytesagain/ai-skills
tags	["selinux","security","linux","mac","access-control","sysops"]
category	sysops

SELinux

SELinux mandatory access control reference. Real commands, real configs, real troubleshooting.

Commands

Command	Description
intro	What is SELinux, MAC vs DAC, NSA origin
modes	Enforcing/permissive/disabled, getenforce/setenforce
contexts	Security contexts user:role:type:level, ls -Z, ps -Z
booleans	getsebool/setsebool, common booleans
policy	Targeted vs MLS, policy modules, semodule
troubleshoot	audit2why, sealert, setroubleshoot
file-labels	chcon, restorecon, semanage fcontext
ports	semanage port, adding custom ports