Contents
When do I need to troubleshoot with SELinux?
If you plan to enable SELinux on systems where it has been previously disabled or if you run a service in a non-standard configuration, you might need to troubleshoot situations potentially blocked by SELinux. Note that in most cases, SELinux denials are signs of misconfiguration.
How does SELinux work in a file system?
SELinux requires access to a file’s security context to operate properly. To do so, SELinux uses extended file attributes which needs to be properly supported by the underlying file system. If the file system supports extended file attributes and you have configured your kernel to enable this support, then SELinux will work on those file systems.
How to check if SELinux audit daemon is running?
If there are no matches, check if the Audit daemon is running. If it does not, repeat the denied scenario after you start auditd and check the Audit log again. In case auditd is running, but there are no matches in the output of ausearch, check messages provided by the systemd Journal:
What does it mean to harden a Gentoo system?
Hardening a system means that you take additional countermeasures against attacks and other risks and is usually a combined set of activities you perform on the system. Within Gentoo Hardened, several projects are active that help further harden a Gentoo system through:
What happens when the SELinux policy is disabled?
When disabled, the SELinux policy is built without user-based access control. When set, policy builds (except for the “strict” policy) will include the unconfined module (thus allowing unconfined domains to exist on the system).
Is there a SELinux config file in sysconfig?
First of all I have no selinux in /etc/sysconfig and in /etc/selinux there is folder mls and files restorecond.conf restorecond_user.conf semanage.conf but no general conf file. On command sestatus it says disabled.