SELinux troubleshooting

SELinux is an integral part of the Fedora Atomic system design. The uCore project strongly recommends that you do not disable SELinux. Disabling it can make it difficult to restore the expected state.

Temporarily set permissive mode for diagnosis

For a short troubleshooting test, permissive mode keeps SELinux active and reporting while temporarily not enforcing denials. Return to enforcing mode when the test is complete:

shellTemporarily set permissive mode for diagnosisCOPY

$ sudo setenforce 0$ getenforce

After diagnosing, restore enforcing mode:

shellRestore SELinux enforcing modeCOPY

$ sudo setenforce 1$ getenforce

Share-specific contexts

For shared directories, prefer a file-context rule that matches the intended service. The NAS guide has the uCore README’s example contexts for NFS and Samba. For general investigation, follow Fedora’s SELinux troubleshooting guide.

Source: uCore SELinux guidance, Fedora SELinux troubleshooting. Checked September 18, 2026.