Linux Administration Cookbook

How to do it...

First off, it's important to understand that with SELinux, we effectively have a running-ish configuration and a saved configuration. When you're running your system, it's important that any changes you make to SELinux are saved, to be loaded in the event of an SELinux relabel.

To see this in action, let's copy some contexts around.

Start by taking a look at the context our .bashrc file has (because it's immediately available):

$ ls -lhaZ .bashrc -rw-r--r--. vagrant vagrant unconfined_u:object_r:user_home_t:s0 .bashrc

There are four parts to this: we have a user (unconfined_u), a role (object_r), a type (user_home_t), and the sensitivity of the resource (s0.) The type is what's important to us here.

Say we want to change the ...