From John R. Dennison, 6 Years ago, written in Plain Text.
This paste will go to meet its maker in 13 Years.
Embed
  1. custom modules:
  2. mkdir -p /root/selinux/modules 2> /dev/null
  3. setenforce 0  # drop to permissive
  4. load_policy   # create reset point to assist in isolation of avcs
  5. cd /root/selinux/modules
  6. # go through all motions to trigger all actions that need to be allowed
  7. audit2allow -M $module_name -l -i /var/log/audit/audit.log # build module
  8. setenforce 1  # restore enforcing
  9. less $module_name.te # inspect the module, salt to taste
  10. semodule -v -i $module_name.pp # load it
  11.