CentOS Quick Start Guide

Managing SELinux troubleshooting

SELinux provides an essential layer of security beyond the discretionary access control set by the user. It prevents any unauthorized attempt to access a resource such as a file by a running process. Here, the process that attempt to access a resource could be a genuine process or it could be a compromised process. Disabling SELinux is not considered good practice. Sometimes, when a binary or application is installed from a third party, it does not contain any appropriate SELinux context, which may lead to restrictions in running that service properly. In those circumstances, SELinux is run in permissive mode and new rules are created based on the denial of service messages captured in log files. In most cases ...