Contents
What happens to the file system when SELinux is disabled?
Actions made while SELinux is disabled may result in the file system no longer having the correct security context. That is, the security context defined by the policy. The best way to relabel the file system is to create the flag file /.autorelabeland reboot the machine.
What do you need to know about SELinux in Linux?
SELinux Overview SELinux provides a flexible Mandatory Access Control(MAC) system built into the Linux kernel. Under standard Linux Discretionary Access Control(DAC), an application or process running as a user (UID or SUID) has the user’s permissions to objects such as files, sockets, and other processes.
What is role based access control ( RBAC ) in SELinux?
Role-Based Access Control (RBAC): Based around SELinux users (not necessarily the same as the Linux user), but not used in the default configuration of the targeted policy Multi-Level Security (MLS): Not commonly used and often hidden in the default targeted policy.
Which is the primary configuration file for SELinux?
The /etc/sysconfig/selinuxfile is the primary configuration file for enabling or disabling SELinux, as well as for setting which policy to enforce on the system and how to enforce it. Note The /etc/sysconfig/selinuxcontains a symbolic link to the actual configuration file, /etc/selinux/config.
Which is the default SELinux policy in CentOS?
By design, SELinux allows different policies to be written that are interchangeable. The default policy in CentOS is the targeted policy which “targets” and confines selected system processes.
What happens when SELinux blocks a system call?
If SELinux blocks an action, this is reported to the underlying application as a normal (or, at least, conventional) “access denied” type error to the application. Many applications, however, do not test all return codes on system calls and may return no message explaining the issue or may return in a misleading fashion.