How to enable selinux in Fedora 24?
[mike@msg-plan ~]$ sestatus
SELinux status: disabled
However, it should be enabled:
[mike@msg-plan ~]$ cat /etc/selinux/config
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=enforcing
# SELINUXTYPE= can take one of these three values:
# targeted - Targeted processes are protected,
# minimum - Modification of targeted policy. Only selected processes are protected.
# mls - Multi Level Security protection.
SELINUXTYPE=targeted
What steps do I need to take, in order to enable selinux?
10 Replies
cat /proc/config.gz | gunzip > running.config && cat running.config
Thanks for your answer. I already found that guide. Imho it is a lot of work and not worth spending my time to create a custom compiled kernel. SELinux is a critical part of CentOS 7, which should be at least an optional feature when deploying or rebuilding a Linode.
Could you please consider making an official feature request to integrate an SELinux supporting kernel in the Linode Manager?
Grtz
Willem
Again thanks for the link. I hadn't seen that one yet. But this is again a very lengthy procedure which is not easily automated, as it requires a lot of changes, including a reboot and changing config in the Linode Manager.
I still don't understand why there is no way to just select the default os provided kernel while deploying or rebuilding. This shouldn't be so much work for a team with so many Linux experience? Again, is it possible to make a feature request for this or are you really telling this can't be done?
Willem
- Install the kernel, run:
yum install kernel.x86_64 grub2
- Create or edit the file /etc/default/grub:
GRUB_TIMEOUT=10
GRUB_CMDLINE_LINUX="console=ttyS0,19200n8"
GRUB_DISABLE_LINUX_UUID=true
GRUB_SERIAL_COMMAND="serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1"
- Generate a grub configuration, run:
mkdir /boot/grub
grub2-mkconfig -o /boot/grub/grub.cfg
- Final step, in your Linode Configuration Profile, set the Kernel option to GRUB 2. Reboot
:)
There is one catch, every time you update your kernel via yum/dnf, you have to re-run the last command.