Editing Security-Enhanced Linux (section)

==Use case scenarios==
SELinux can potentially control which activities a system allows each user, process, and daemon, with very precise specifications. It is used to confine [[Daemon (computer software)|daemons]] such as database engines or web servers that have clearly defined data access and activity rights. This limits potential harm from a confined daemon that becomes compromised.

Command-line utilities include:<ref>{{cite web |url=https://fedoraproject.org/wiki/SELinux/Commands |title=SELinux/Commands - FedoraProject |access-date=2015-11-25 |archive-date=24 October 2020 |archive-url=https://web.archive.org/web/20201024024509/https://fedoraproject.org/wiki/SELinux/Commands |url-status=live }}</ref>
<code>chcon</code>,<ref>{{cite web |url=http://linuxcommand.org/man_pages/chcon1.html |archive-url=https://web.archive.org/web/20041024211853/http://linuxcommand.org/man_pages/chcon1.html |url-status=dead |archive-date=2004-10-24 |title=chcon |publisher=Linuxcommand.org |access-date=2013-02-06 }}</ref>
<code>restorecon</code>,<ref>{{cite web |url=http://linux.die.net/man/8/restorecon |title=restorecon(8) - Linux man page |publisher=Linux.die.net |access-date=2013-02-06 |archive-date=27 February 2021 |archive-url=https://web.archive.org/web/20210227145344/https://linux.die.net/man/8/restorecon |url-status=live }}</ref>
<code>restorecond</code>,<ref>{{cite web |url=http://linux.die.net/man/8/restorecond |title=restorecond(8) - Linux man page |publisher=Linux.die.net |access-date=2013-02-06 |archive-date=27 August 2017 |archive-url=https://web.archive.org/web/20170827014845/https://linux.die.net/man/8/restorecond |url-status=live }}</ref>
<code>runcon</code>,<ref>{{cite web |url=http://linux.die.net/man/1/runcon |title=runcon(1) - Linux man page |publisher=Linux.die.net |access-date=2013-02-06 |archive-date=1 May 2020 |archive-url=https://web.archive.org/web/20200501180729/https://linux.die.net/man/1/runcon |url-status=live }}</ref>
<code>secon</code>,<ref>{{cite web |url=http://linux.die.net/man/1/secon |title=secon(1) - Linux man page |publisher=Linux.die.net |access-date=2013-02-06 |archive-date=26 October 2019 |archive-url=https://web.archive.org/web/20191026154733/https://linux.die.net/man/1/secon |url-status=live }}</ref>
<code>fixfiles</code>,<ref>{{cite web |url=http://linux.die.net/man/8/fixfiles |title=fixfiles(8): fix file SELinux security contexts - Linux man page |publisher=Linux.die.net |access-date=2013-02-06 |archive-date=3 May 2020 |archive-url=https://web.archive.org/web/20200503094354/https://linux.die.net/man/8/fixfiles |url-status=live }}</ref>
<code>setfiles</code>,<ref name="auto">{{cite web |url=http://linux.die.net/man/8/setfiles |title=setfiles(8): set file SELinux security contexts - Linux man page |publisher=Linux.die.net |access-date=2013-02-06 |archive-date=1 May 2020 |archive-url=https://web.archive.org/web/20200501204848/https://linux.die.net/man/8/setfiles |url-status=live }}</ref>
<code>load_policy</code>,<ref>{{cite web |url=http://linux.die.net/man/8/load_policy |title=load_policy(8) - Linux man page |publisher=Linux.die.net |access-date=2013-02-06 |archive-date=26 October 2019 |archive-url=https://web.archive.org/web/20191026143702/https://linux.die.net/man/8/load_policy |url-status=live }}</ref>
<code>booleans</code>,<ref>{{cite web |url=http://linux.die.net/man/8/booleans |title=booleans(8) - Linux man page |publisher=Linux.die.net |access-date=2013-02-06 |archive-date=3 June 2020 |archive-url=https://web.archive.org/web/20200603200637/https://linux.die.net/man/8/booleans |url-status=live }}</ref>
<code>getsebool</code>,<ref>{{cite web |url=http://linux.die.net/man/8/getsebool |title=getsebool(8): SELinux boolean value - Linux man page |publisher=Linux.die.net |access-date=2013-02-06 |archive-date=3 June 2020 |archive-url=https://web.archive.org/web/20200603194859/https://linux.die.net/man/8/getsebool |url-status=live }}</ref>
<code>setsebool</code>,<ref>{{cite web |url=http://linux.die.net/man/8/setsebool |title=setsebool(8): set SELinux boolean value - Linux man page |publisher=Linux.die.net |access-date=2013-02-06 |archive-date=26 October 2019 |archive-url=https://web.archive.org/web/20191026153420/https://linux.die.net/man/8/setsebool |url-status=live }}</ref>
<code>togglesebool</code><ref>{{cite web |url=http://linux.die.net/man/8/togglesebool |title=togglesebool(8) - Linux man page |publisher=Linux.die.net |access-date=2013-02-06 |archive-date=26 August 2020 |archive-url=https://web.archive.org/web/20200826183017/https://linux.die.net/man/8/togglesebool |url-status=live }}</ref>
<code>setenforce</code>,
<code>semodule</code>,
<code>postfix-nochroot</code>,
<code>check-selinux-installation</code>,
<code>semodule_package</code>,
<code>checkmodule</code>,
<code>selinux-config-enforcing</code>,<ref>{{cite web |url=http://manpages.ubuntu.com/manpages/natty/man8/selinux-config-enforcing.8.html |title=Ubuntu Manpage: selinux-config-enforcing - change /etc/selinux/config to set enforcing |publisher=[[Canonical Ltd]] |access-date=2013-02-06 |url-status=dead |archive-url=https://web.archive.org/web/20121220020432/http://manpages.ubuntu.com/manpages/natty/man8/selinux-config-enforcing.8.html |archive-date=2012-12-20 }}</ref>
<code>selinuxenabled</code>,<ref>{{cite web |url=http://manpages.ubuntu.com/manpages/natty/man1/selinuxenabled.1.html |title=Ubuntu Manpage: selinuxenabled - tool to be used within shell scripts to determine if |publisher=[[Canonical Ltd]] |access-date=2013-02-06 |url-status=dead |archive-url=https://web.archive.org/web/20130209033811/http://manpages.ubuntu.com/manpages/natty/man1/selinuxenabled.1.html |archive-date=2013-02-09 }}</ref>
and <code>selinux-policy-upgrade</code><ref>{{cite web |url=http://manpages.ubuntu.com/manpages/natty/man8/selinux-policy-upgrade.8.html |title=Ubuntu Manpage: selinux-policy-upgrade - upgrade the modules in the SE Linux policy |publisher=[[Canonical Ltd]] |access-date=2013-02-06 |url-status=dead |archive-url=https://web.archive.org/web/20120404160143/http://manpages.ubuntu.com/manpages/natty/man8/selinux-policy-upgrade.8.html |archive-date=2012-04-04 }}</ref>

===Examples===
To put SELinux into enforcing mode:
:<code>setenforce 1</code>

To query the SELinux status:
:<code>getenforce</code>