2
I have a set of files that can't have selinux's extended acl on them. When running ls -la I get a result similar to:
-rwxr-xr-x. 1 root root 1 Aug 8 2014 filea
-rwxr-xr-x. 1 root root 1 Aug 8 2014 fileb
^ Note the dot
SELinux is set to permissive, but I can't run the command sudo setfattr -h -x security.selinux filea
, it returns the error setfattr: filea: Permission denied
. If I completely disable SELinux this works though.
The issue is that disabling SELinux requires a restart of the server, which isn't possible. Is there any way to remove SELinux file ACLs (aka remove that dot in ls -la
) without restarting the server?