User Tools

Site Tools


selinux:understanding_selinux_configuration

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
selinux:understanding_selinux_configuration [2016/07/11 10:46] peterselinux:understanding_selinux_configuration [2019/12/04 20:33] (current) – removed peter
Line 1: Line 1:
-====== SELinux - Understanding SELinux Configuration ====== 
- 
-The SELinux configuration file is **/etc/selinux/config file**. 
- 
-Update the configuration file as follows: 
-  * SELINUX=enforcing : Enforcing is the default mode which will enable and enforce the SELinux security policy on the Linux.  It will also deny unauthorized access and log actions in a log file. 
-  * SELINUXTYPE=targeted : Only targeted network daemons (such as DNS, Apache and others) are protected. 
- 
-Save and close the file.  Make sure SELinux is not disabled using Grub boot loader.  Search /boot/grub/grub.conf file using grep and make sure the following line **DOES NOT** appears: 
- 
-<code bash> 
-egrep -i 'selinux=0|enforcing=0' /boot/grub/grub.conf 
-</code> 
- 
-If you found lines with selinux=0 or enforcing=0, remove them and save the changes. 
- 
-Reboot the server: 
- 
-<code bash> 
-reboot 
-</code> 
- 
  
selinux/understanding_selinux_configuration.1468233990.txt.gz · Last modified: 2020/07/15 09:30 (external edit)

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki