After configuring a SELinux fcontext for a directory, which command applies the context to the directory and its contents?

After configuring a SELinux fcontext for a directory, which command applies the context to the directory and its contents?

• A. sudo restorecon -Rv /var/dbfiles
• B. sudo semanage fcontext -a -t container_file_t '/path(/.*)?'
• C. sudo chcon -R -t container_file_t /var/dbfiles
• D. sudo setfcontext -R /var/dbfiles

Answer: (A)

Applying the configured SELinux file context to an existing directory and all its files is done with restorecon. This utility reads the fcontext rules you set (for example, with semanage fcontext) and writes the matching labels to the files under the specified path. The -R option makes it recursive so every file and subdirectory gets labeled, and -v provides visibility into what changes were made. This approach aligns the live filesystem with the policy-backed contexts without manually changing each file. While configuring fcontext stores the rule for future labeling, and other tools like chcon can change a label directly, restorecon consistently applies the policy-defined contexts across the directory tree.

Applying the configured SELinux file context to an existing directory and all its files is done with restorecon. This utility reads the fcontext rules you set (for example, with semanage fcontext) and writes the matching labels to the files under the specified path. The -R option makes it recursive so every file and subdirectory gets labeled, and -v provides visibility into what changes were made. This approach aligns the live filesystem with the policy-backed contexts without manually changing each file. While configuring fcontext stores the rule for future labeling, and other tools like chcon can change a label directly, restorecon consistently applies the policy-defined contexts across the directory tree.