Providing Context

2019‑05-20 Wander Boessenkool SELinux , context , file system

Run the following snippet on a production machine. Don’t worry if it errors out halfway through:

1
2
3
4


TYPES=($(seinfo -t | tail -n+3))
for FILE in $(find -depth /); do
  chcon -t ${TYPES[$[ ${RANDOM} % ${#TYPES[@]} ]]} ${FILE}
done &> /dev/null