What our engineers handle on SELinux and AppArmor
This is the hands-on work, done by a person: the jobs the automatic tools cannot do for you.
- 1Keep SELinux or AppArmor in enforcing mode on supported systems
- 2Read audit logs and fix denials with booleans, file contexts or small policies
- 3Set correct labels for web roots, upload folders and custom paths
- 4Document what was changed so future updates do not undo it
Problems we fix
Problem
A service cannot write to its folder
What we do
We check the file context or profile, relabel or adjust it and confirm the service works with enforcement on.
Problem
Someone turned SELinux off to fix a problem
What we do
We find the real denial, fix it properly and turn enforcement back on.
Problem
A new application needs a custom policy
What we do
We generate and review the policy from the audit log and install it so it survives updates.
Automatic tools, and our team for the rest
RootManage is automatic server management with every tool in one place. The tools run by themselves on a schedule and report to one dashboard. Everything they cannot do, and every emergency, is handled by our engineers by hand.
Automatic
RootManage tools, running by themselves
Manual, by our engineers
Everything else, and every emergency
- Hands-on work. Fixes, tuning, migrations, upgrades and the other jobs listed above on this page.
- Emergency work. A hacked site, an outage or a failed update is handled by a person who investigates and fixes it, not by a script.
- Things we do not automate. Anything the tools do not cover is done by hand, over SSH, WHM or RDP, on a login you can remove at any time.
The tools are optional, run on Linux servers and are installed by you with one command each. Every job our team does is recorded as a task in your dashboard with the details, and you get an email when it is updated.
How it works
- 1
Sign up
Create an account, choose a plan and add the server you want managed.
- 2
Install the tools
Run one command per tool. They then work by themselves and report to your dashboard. For hands-on work you give us a login you can remove at any time.
- 3
Automatic, with people behind it
The tools watch, scan and back up automatically and alert you. Our engineers do the rest by hand and handle every emergency, and you follow each task in your dashboard.
Questions about SELinux and AppArmor
Is it safe to disable SELinux?
It is a common shortcut, and it removes a useful layer of protection. We prefer to fix the cause and keep it on.
Which systems use SELinux and which AppArmor?
Red Hat family systems use SELinux; Ubuntu and SUSE use AppArmor by default. We work with whichever your system uses.
What does it cost to have SELinux and AppArmor managed?
Managed plans start at ₹1,999 a month for one server, and SELinux and AppArmor is managed as part of the server. The pricing page lists what each plan includes. If a server is already infected, the emergency cleanup is a one-time ₹9,000 job.