How To Install restorecon on Debian 11

In this guide, we’ll discuss How To Install restorecon on Debian 11. Also, we will demonstrate how to uninstall and update restorecon.

One-liner install command

For those in a hurry, here's a one-line installation command:

sudo apt-get update && sudo apt -y install policycoreutils

But if you are interested in the detailed steps with descriptions, the following information is for you.

What is restorecon and what are the ways to install it?

Before beginning this tutorial, you will need access to a server or computer running Debian 11. This guide was written specifically with a server running Debian 11 in mind, although it should also work on older, supported versions of the operating system.

Also, make sure you are running a regular, non-root user with sudo privileges configured on your server. When you have an account available, log in as your non-root user to begin.

There are several ways to install restorecon on Debian 11. You can use (links are clickable):

In the following sections, we will describe each method in detail. You can choose one of them or refer to the recommended one.

Install restorecon using apt-get

First, update apt database with apt-get using the following command.

sudo apt-get update

After updating apt-get database, You can install restorecon using apt by running the following command:

sudo apt -y install policycoreutils

Install restorecon using apt

Because restorecon is available in Debian 11’s default repositories, it is possible to install it from these repositories using the apt packaging system.

To begin, update apt database with apt using the following command.

sudo apt update

After updating apt database, You can install restorecon using apt by running the following command:

sudo apt -y install policycoreutils

Install restorecon using aptitude

If you want to follow this method, you might need to install aptitude first since aptitude is usually not installed by default on Debian 11. Update apt database with aptitude using the following command.

sudo aptitude update

After updating aptitude database, You can install restorecon by running the following command:

sudo aptitude -y install policycoreutils

How to upgrade (update) a single package restorecon using apt-get?

First, you will need to update packages index. Run update command as usual:

sudo apt-get update

Next, to upgrade only the restorecon, e.g. single package, you should use the following format with the apt-get command/apt command:

sudo apt-get --only-upgrade install policycoreutils

Note that this command will not install any new packages! If you wish to install the package if it doesn't exist you may leave out --only-upgrade part.

How To Uninstall restorecon from Debian 11

To uninstall only the restorecon package you can execute the following command:

sudo apt-get remove policycoreutils

Uninstall restorecon and all its dependencies

To uninstall restorecon and its dependencies that are no longer needed by Debian 11, you can use the command below:

sudo apt-get -y autoremove policycoreutils

Remove restorecon with all configurations and data

To remove restorecon configuration and data from your system you can run the following purge command:

sudo apt-get -y purge policycoreutils

Remove restorecon completely (configurations, data and all of its dependencies)

And lastly, you can run the next command to remove absolutely everything related to restorecon package, e.g.: configurations, data and all of its dependencies. Just use this command:

sudo apt-get -y autoremove --purge policycoreutils

Extra info and code examples

Security-enhanced Linux is a patch of the Linux? kernel and a number of utilities with enhanced security functionality designed to add mandatory access controls to Linux. The Security-enhanced Linux kernel contains new architectural components originally developed to improve the security of the Flask operating system. These architectural components provide general support for the enforcement of many kinds of mandatory access control policies, including those based on the concepts of Type Enforcement?, Role-based Access Control, and Multi-level Security. This package contains the core policy utilities that are required for basic operation of an SELinux system. These utilities include load_policy to load policies, setfiles to label filesystems, newrole to switch roles, run_init to run /etc/init.d scripts in the proper context, and restorecond to restore contexts of files that often get the wrong context. It also includes the mcstransd to map a maching readable sensitivity label to a human readable form. The sensitivity label is comprised of a sensitivity level (always s0 for MCS and anything from s0 to s15 for MLS) and a set of categories. A ranged sensitivity label will have a low level and a high level where the high level will dominate the low level. Categories are numbered from c0 to c1023. Names such as s0 and c1023 and not easily readable by humans, so mcstransd translated them to human readable labels such as SystemLow and SystemHigh.


You now have a full guide on how to install restorecon using apt, apt-get and aptitude tools. Also, we showed how to update as a single package and different ways to uninstall the restorecon from Debian 11.

See also:

How To Install restorecon on Kali Linux

How To Install restorecon on Debian 11

How To Install restorecon on Fedora 34

How To Install restorecon on CentOS 8

How To Install restorecon on Ubuntu 22.04

How To Install restorecon on Ubuntu 21.04