<?xml version="1.0"?>
<!DOCTYPE chapter PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
	"http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd">
<chapter id="feature-selinux">
  <title>SELinux Policy</title>

  <para>If present on the system Cockpit can set the SELinux mode to enforcing or permissive.
    It can also use <code>setroubleshootd</code> to show audit issues and apply suggested
    fixes.</para>

  <para>To perform similar tasks from the command line use the <code>setenforce</code> and
    <code>sealert</code> tools.</para>

  <para>To clear out all the information that <code>setroubleshootd</code> tracks, you
    can use a commands like:</para>

<programlisting>
$ <command>sudo killall setroubleshootd</command>
$ <command>sudo rm -rf /var/lib/setroubleshoot/*</command>
</programlisting>

</chapter>
