find invalid fcontext without autorelabeling

Daniel J Walsh dwalsh at redhat.com
Fri Oct 24 17:41:26 UTC 2014


It is doubtful disabling modules will not make SELinux run faster.

You could have done something like

find / -context="\*:unlabeled_t:\*"  -print0 | restorecon -f - -0

But

restorecon -R /

Would also work.

On 10/24/2014 01:27 PM, george karakou wrote:
> It seems that restorecon -Rv / would do the trick, thanks
>
> On 10/24/2014 08:15 PM, Yusuf Hadiwinata wrote:
>> Hi
>>
>> You need to know the right security context and use semanage fcontext -t
>> http_sys_content_t '/var/www/myweb' and run restoreconf for example
>>
> -- 
> selinux mailing list
> selinux at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux



More information about the selinux mailing list