Red Hat Security: Linux in Physical, Virtual, and Cloud

To migrate a system that has SELinux disabled to enforcing mode: first, switch to permissive mode; then, review the audit log, relabel files, and resolve issues; and finally, switch to enforcing mode.

By setting confined SELinux users, you can restrict users from using the sudo or su commands to switch user, logging in by using the ssh command, or running some commands on the system.

You can use the sesearch command to look up the access rules and transition rules that SELinux enforces.

You can use the sepolicy transition command to analyze whether a process running in one domain can potentially use one or more domain transitions to run a process in another domain.

You can use the matchpathcon command to determine the expected context of a file that is created in a particular location, even if the file does not exist.