Defaults Are Great

2019‑06-05 Wander Boessenkool SELinux , context , defaults

Everybody loves defaults. Add some more defaults to your file systems!

1

chcon -t default_t /

Providing Context

2019‑05-20 Wander Boessenkool SELinux , context , file system

Run the following snippet on a production machine. Don’t worry if it errors out halfway through:

1
2
3
4


TYPES=($(seinfo -t | tail -n+3))
for FILE in $(find -depth /); do
  chcon -t ${TYPES[$[ ${RANDOM} % ${#TYPES[@]} ]]} ${FILE}
done &> /dev/null