fixfiles

Restore SELinux contexts for entire system

$ fixfiles restore

$ fixfiles onboot

$ fixfiles -F restore

$ fixfiles -R package1,package2 restore

$ fixfiles -N "2024-01-01" restore

$ fixfiles -v restore

$ fixfiles -M restore

fixfiles [options] {restore|check|onboot|relabel|verify}

fixfiles fixes file SELinux security contexts on the system. It is a wrapper script around restorecon and setfiles that provides convenient system-wide relabeling options.

-B

Record current date for later use with restore to speed up labeling

Force reset of context for customizable files

Clear /tmp directory without confirmation

Discover files within specific RPM packages and restore their contexts

Compare with previous filecontext and restore affected files

Only process files created after specified date (YYYY-MM-DD HH:MM)

Bind mount filesystems before relabeling

Verbose mode; run restorecon with -v instead of -p

Restore file contexts to defaults

Check file contexts without changing them

Schedule relabeling on next boot

Relabel entire filesystem

Verify file contexts match policy

/etc/selinux/[policy]/contexts/files/file_contexts

Default SELinux file context rules defining security labels for paths.

A full filesystem relabel can take significant time. Using -B with onboot then restore can speed up subsequent relabeling. Requires SELinux to be enabled.

fixfiles is part of the policycoreutils package, providing SELinux file context management utilities for Red Hat-based systems.

restorecon(8), setfiles(8), chcon(1)