LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 02-25-2011, 07:37 AM   #1
manleon
LQ Newbie
 
Registered: Oct 2009
Posts: 5

Rep: Reputation: 0
Enabling SELinux on RHEL 5.4


Hello,

We have installed RHEL 5.4 on our servers and everything is running fine. Now I have gone through various server hardening checklist and most of them suggest to enable SELinux. We have several services running on Linux box. Now my question is, do we have to make any chagnes to the existing configurations if we enable SELinux. Or we just enable SELinux and leave it as it is. Because I have had prior experiences where SElinux will stop many services and restrict access to many libraries when enabled.

Thanks in Advance.
 
Old 02-26-2011, 04:29 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,666
Blog Entries: 54

Rep: Reputation: 2952Reputation: 2952Reputation: 2952Reputation: 2952Reputation: 2952Reputation: 2952Reputation: 2952Reputation: 2952Reputation: 2952Reputation: 2952Reputation: 2952
While running earlier incarnations of SELinux indeed would have been harder I'd say in general not so hard as to make using it impossible as you could always have extended your local policy. The easiest start IMHO would have been to run RHEL 5U5, as it is the current version with all kernel, policy, userland fixes included, and SELinux enabled right from the start, as that would keep things in sync and help you catch exceptions earlier. If this machine is in production you might want to use a staging or virtual machine instead, enable SELinux in permissive mode, restore contexts and watch your messages and audit logs for problems.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
SElinux help in RHEL 4 for squid.........!!! Soby Thomas Linux - Software 4 05-20-2009 01:53 AM
RHEL 5 SELinux and NFS louisb Linux - Security 2 08-17-2007 08:38 PM
LXer: With RHEL 5, Red Hat goes to bat for SELinux LXer Syndicated Linux News 0 06-07-2007 10:16 AM
Should enabling selinux stop me from booting? nick623 Fedora 2 08-04-2006 04:51 PM
enabling Yum on RHEL 4 deverej Red Hat 6 03-16-2005 12:22 AM


All times are GMT -5. The time now is 11:36 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration