fixfiles
fix SELinux file security contexts
TLDR
Restore SELinux contexts for entire system
$ fixfiles restore
Relabel filesystem on next boot$ fixfiles onboot
Force reset of customizable files$ fixfiles -F restore
Restore contexts for specific RPM packages$ fixfiles -R package1,package2 restore
Only process files created after date$ fixfiles -N "2024-01-01" restore
Verbose output$ fixfiles -v restore
Bind mount filesystems before relabeling$ fixfiles -M restore
SYNOPSIS
fixfiles [options] {restore|check|onboot|relabel|verify}
DESCRIPTION
fixfiles fixes file SELinux security contexts on the system. It is a wrapper script around restorecon and setfiles that provides convenient system-wide relabeling options.
PARAMETERS
-B
Record current date for later use with restore to speed up labeling-F
Force reset of context for customizable files-f
Clear /tmp directory without confirmation-R PACKAGES
Discover files within specific RPM packages and restore their contexts-C FILECONTEXT
Compare with previous filecontext and restore affected files-N DATE
Only process files created after specified date (YYYY-MM-DD HH:MM)-M
Bind mount filesystems before relabeling-v
Verbose mode; run restorecon with -v instead of -prestore
Restore file contexts to defaultscheck
Check file contexts without changing themonboot
Schedule relabeling on next bootrelabel
Relabel entire filesystemverify
Verify file contexts match policy
CONFIGURATION
/etc/selinux/[policy]/contexts/files/file_contexts
Default SELinux file context rules defining security labels for paths.
INSTALL
sudo apt install policycoreutils
sudo dnf install policycoreutils
sudo zypper install policycoreutils
nix profile install nixpkgs#policycoreutils
CAVEATS
A full filesystem relabel can take significant time. Using -B with onboot then restore can speed up subsequent relabeling. Requires SELinux to be enabled.
HISTORY
fixfiles is part of the policycoreutils package, providing SELinux file context management utilities for Red Hat-based systems.
SEE ALSO
restorecon(8), setfiles(8), chcon(1)
