# SELinux Policy

If present on the system Cockpit can set the SELinux mode to enforcing or permissive. It can also use `setroubleshootd` to show audit issues and apply suggested fixes.

To perform similar tasks from the command line use the `setenforce` and `sealert` tools.

To clear out all the information that `setroubleshootd` tracks, you can use a commands like:

    $ sudo killall setroubleshootd
    $ sudo rm -rf /var/lib/setroubleshoot/*