Mastering Linux Security and Hardening

Installing the SELinux tools

For some bizarre reason that I'll never understand, the tools that you need to administer SELinux don't get installed by default, even though SELinux itself does. So, the first thing you'll need to do on your CentOS virtual machine is to install them:

sudo yum install setools policycoreutils policycoreutils-python

In a later portion of this chapter, we'll be looking at how to use setroubleshoot to help diagnose SELinux problems. In order to have some cool error messages to look at when we get there, go ahead and install setroubleshoot now, and activate it by restarting the auditd daemon.  (There's no setroubleshoot daemon because setroubleshoot is meant to be controlled by the auditd daemon.) We have the following ...