Learn about Centmin Mod LEMP Stack today
Become a Member

Sysadmin Disabling SELinux

Discussion in 'System Administration' started by noly, Jul 26, 2017.

  1. noly

    noly Premium Member Premium Member

    69
    10
    8
    Jul 24, 2017
    Frankfurt/Germany
    Ratings:
    +20
    Local Time:
    5:00 PM
    1.13.x
    10.x
    Hello and hi,

    i am wondering if it is necessary to keep SELinux diabled after centmin installation.

    Because...

    "Red Hat strongly recommends to use permissive mode instead of permanently disabling SELinux. See Section 5.4.1.2, “Permissive Mode” for more information about permissive mode."
     
  2. eva2000

    eva2000 Administrator Staff Member

    30,156
    6,784
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,135
    Local Time:
    1:00 AM
    Nginx 1.13.x
    MariaDB 5.5
    Yeah keep selinux disabled for centmin mod. Unless you 100% know and understand what and how selinux operates and how restrictive it can be for non-standard configuration setups that centmin mod uses and can setup the correct selinux 'whitelisting' for those configurations. I do not provide any support for selinux so end user would need to know about it themselves.

    see my reply at what is SE-linux and why disable ? too

    also some centmin mod functions specifically check if selinux is disabled first
     
    • Like Like x 1
    • Agree Agree x 1