Check mode

getenforce

Restore SELinux context recursively

sudo restorecon -R -v /mypath

Or define explicitly bin_t for the script

sudo semanage fcontext -a -t bin_t "/mypath/psft-appserver-APPDOM.sh"
sudo restorecon -v /mypath/psft-appserver-APPDOM.sh

Check SELinux context only for some files

ls -Z/-Zd /mypath/myfile

Fournit des PoC (python, etc..)

Commande rpm intéressante :

rpm -q --changelog sudo

$ mkdir -p config work logs
$ certbot certonly --config-dir config/ --work-dir work/ --logs-dir logs/ \
--server https://acme-v02.api.letsencrypt.org/directory --manual \
-d '*.monsite.fr'