[ BASICS.LINUX.CHCON ]

[ BASICS.LINUX.CHCON ]

# COPY SELINUX CONTEXT REFERENCE
chcon --reference=ssl.conf httpd.conf

# CHANGE ONE ELEMENT OF A FILE CONTEXT
chcon -u system_u httpd.conf
chcon -r object_r httpd.conf
chcon -t httpd_config_t httpd.conf
chcon -l s0 httpd.conf

# CHANGE ALL ELEMENTS OF A FILE CONTEXT
chcon -u system_u -r object_r -t httpd_config_t -l s0 httpd.conf

# CHANGE SYMBOLIC LINK CONTEXT ONLY
chcon -u system_u -t httpd_config_t apache.conf
chcon --dereference -u system_u -t httpd_config_t apache.conf

# CHANGE AND NOT DEREFERENCE THE FILE FROM THE LINK
#   (option -h same result)
chcon --no-dereference -u system_u -t httpd_config_t apache.con
chcon -hv -u system_u -t httpd_config_t apache.conf

# SYMBOLIC LINK CONTEXT CHANGES RECURSIVELY BUT NOT FILE CONTEXT
chcon -RHv system_u:object_r:type_t:s0 dir

# FORCE RECURSIVELY TRAVERSE SPECIFIC SYMBOLIC LINKS
chcon -RHv system_u:object_r:httpd_config_t:s0 conf.d

# FORCE TRAVERSE ALL SYMBOLIC LINKS
# RECURSIVELY DEREFERENCE ALL FILE CONTEXTS WITHIN DIRECTORY
#   option (-L)inks
chcon -RLv -t httpd_config_t dir

# DISASTER 101
chcon -Rv system_u:object_r:httpd_config_t:s0 /
chcon -Rv --no-preserve-root system_u:object_r:httpd_config_t:s0 /

# AVOID SYSTEMWIDE RECURSIVE CONTEXT
chcon -Rv --preserve-root system_u:object_r:httpd_config_t:s0 /
chcon -RPv --preserve-root system_u:object_r:httpd_config_t:s0 /