Security-enhanced Linux (SELinux) - Filesystem Relabeling
Security-enhanced Linux (SELinux) filesystem security context labels are associated with files and are stored as extended attributes. If the Security-enhanced Linux (SELinux) is disabled, the security context labels will no more written as attribute and become out of sync.
To relabel part or all of the Linux filesystem without a reboot, the "fixfiles" and "restorecon" commands can be used.
The SELinux "restorecon" command
The SELinux "restorecon" command sets the security context of one or more files by marking the extended attributes with the appropriate file or security context.
[root@RHEL03 ~]# restorecon -F -R /ftp
The SELinux "fixfiles" command
The SELinux "fixfiles" command checks or corrects the security context database on the file system.
To relabel entire filesystem, create “/.autorelabel” hidden file and restart the Linux computer. The automatic relabeling of the entire filesystem will take place during the boot process. Remember, you need to reboot the server to accomplish this.