Skip to content

Don't disable SELinux. #13

@jamessemai

Description

@jamessemai

It seems paradoxical that what is essentially a security tool recommends weakening the host operating system it is installed on by disabling SELinux:

echo "Disabling SELinux..."
if [ -e /selinux/enforce ]; then
echo 0 > /selinux/enforce
fi
if [ -e /etc/selinux/config ]; then
sed -i -e 's/^SELINUX=.*/SELINUX=disabled/g' /etc/selinux/config
fi

In which use cases does SELinux interfere with Zenoss? I could not find any - re-enabling SELinux seems to work fine.

Alternatively, if there are one or more use cases where SELinux interferes with Zenoss, I propose creating a proper SELinux policy instead, as explained at http://wiki.centos.org/HowTos/SELinux

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions