Mastering Linux Security and Hardening - Second Edition

Using chcon

There are two ways to use chcon to fix an incorrect SELinux type on a file or directory. The first is to just manually specify the proper type:

[donnie@localhost html]$ sudo chcon -t httpd_sys_content_t index.html[sudo] password for donnie:[donnie@localhost html]$ ls -Z-rw-rw-r--. donnie donnie unconfined_u:object_r:httpd_sys_content_t:s0 index.html[donnie@localhost html]$

We can use chcon to change any part of the context, but as I keep saying we're only interested in the type, which gets changed with the -t option. You can see in the ls -Z output that the command was successful.

The other way to use chcon is to reference a file that has the proper context. For demo purposes, I changed the index.html file back to the home directory ...