Selinux: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
Line 4: Line 4:


=Overview=
=Overview=
SELinux stands for Security-Enhanced Linux. It provides Mandatory Access Control (MAC) for Linux systems. Under the control of SELinux, all processes and files are given a ''type'', and their access on the system is limited by fine-grained controls of various types.


=Subjects=
=Subjects=

Revision as of 15:30, 9 May 2017

Internal

Overview

SELinux stands for Security-Enhanced Linux. It provides Mandatory Access Control (MAC) for Linux systems. Under the control of SELinux, all processes and files are given a type, and their access on the system is limited by fine-grained controls of various types.

Subjects

How to Find Out Whether SELinux is Enabled

getenforce

If SELinux is enabled, the command will return "Enforcing".

Configuration

Install Management and Troubleshooting Tools

yum provides /usr/sbin/semanage
yum provides sealert
yum -y install policycoreutils-python
yum -y install setroubleshoot-server

Troubleshooting

Permission Denied when Trying to Write in a Directory

TODO, rationalize the following content: Media_Wiki_Installation#Fails_to_upload_images_with_.27Fatal_exception_of_type_.22MWException.22.27.