"resetting" selinux back to defaults

[Paul Howarth]

On Tue, 2006-04-04 at 20:10 +0100, Chris Jones wrote:
> Hi
> 
> Previously, I have run
> 
> setsebool -P allow_execheap=true allow_execmod=true
> 
> to get an application running under FC5. I now want to undo this change - Is 
> it enough to issue
> 
> setsebool -P allow_execheap=false allow_execmod=false
> 
> to undo this ? Put another way, whats the best way to remove any selinux 
> customisation and return to a "default" setup ?

That should fix the booleans you've changed (assuming you remember all
of them). You can check the settings of all booleans as follows:

# getsebool -a

If you've used semanage to change default file contexts, the local
changes should be visible
in /etc/selinux/targeted/modules/active/file_contexts.local

You can list any local policy modules running using "semodule -l"

If you've manually changed file contexts using chcon, you would need to
use restorecon to fix them (if you remember the files you've changed) or
relabel the whole system (if you can't remember what you've changed).

Paul.