Configuring SELinux

30 minutes
  • 2 Learning Objectives

About this Hands-on Lab

In this lab we will edit SELinux settings, using booleans to allow communications between services. Then we will place SELinux into *enforcing* mode and ensure that setting is persistent.

Learning Objectives

Successfully complete this lab by achieving the following learning objectives:

Permit `httpd` to Communicate with Zabbix
  1. Find the necessary boolean to permit httpd to communicate with Zabbix.

    [root@host]# getsebool -a | grep zabbix
    • We’ll see the boolean is off
  2. Set the boolean to "on"

    [root@host]# setsebool -P httpd_can_connect_zabbix on
  3. Verify that change took effect

    [root@host]# getsebool -a | grep zabbix
    • Now we’ll see that the boolean is on.
Put SELinux into *enforcing* Mode and Ensure That the Setting Is Persistent
  1. Check the SELinux state

    [root@host]# getenforce

    This will show that it is in permissive mode, so we need to change it to enforcing mode.

  2. Put SELinux into enforcing mode

    [root@host]# setenforce 1
  3. Check to make sure SELinux is now in enforcing mode

    [root@host]# getenforce

    We can see our change worked and SELinux is now in enforcing mode.

  4. Ensure SELinux boots into enforcing mode

    Edit the SELinux configuration file:

    [root@host]# vi /etc/selinux/config

    Type i to enter Insert mode, arrow down to the SELINUX line, and set it to enforcing:

    SELINUX=enforcing

    Type Esc, then :wq to exit. When the server boots again, SELinux will remain in enforcing mode.

Additional Resources

The network team needs help setting up SELinux to function with their new Zabbix network monitoring application. We need configure SELinux to permit httpd to communicate with Zabbix. Then we have to put SELinux into enforcing mode so that the network team can test our settings. We need to be sure enforcing mode is persistent.

What are Hands-on Labs

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Get Started
Who’s going to be learning?

How many seats do you need?

  • $499 USD per seat per year
  • Billed Annually
  • Renews in 12 months

Ready to accelerate learning?

For over 25 licenses, a member of our sales team will walk you through a custom tailored solution for your business.


$2,495.00

Checkout
Sign In
Welcome Back!

Psst…this one if you’ve been moved to ACG!