Hi,

What is the safest method to reset SELinux to its default configuration without reinstalling the operating system?

For filesystem labels:

touch /.autorelabel
reboot

For  modules I don't know how it could be achieved.

Some time semanage supports --local

semanage ports --list --local

semanage booleans --list --local

Which should list what was modified from default policy.

- Thomas