semanage

Manage SELinux policy

high risk

interactive breakdown — edit the command and press Explain

$

⚠ Risks & cautions

Changes persist across reboots.
Avoid broad types such as unconfined_t or permissive domains.

Safer / dry-run alternatives

semanage port -l | grep <type>Review before adding

What it does

Persistent SELinux configuration: file contexts, ports, booleans, logins.

Examples

semanage port -a -t http_port_t -p tcp 8080Allow nginx on 8080 · explain & risk-check →

semanage fcontext -l | grep httpdList contexts · explain & risk-check →

Related

restorecon selinux

Open the full explainer →More in Users, Permissions & Security

Reference text is hand-written and may be incomplete — check man semanage for your version. Test destructive commands on a non-production system first.