Mastering Linux Security and Hardening - Second Edition

Installing the SELinux tools

For some bizarre reason that I'll never understand, the tools that you need to administer SELinux don't get installed by default, even though SELinux itself does. So, the first thing you'll need to do on your CentOS virtual machine is to install them.

On CentOS 7, run this command:

sudo yum install setools policycoreutils policycoreutils-python

On CentOS 8, run this command:

sudo dnf install setools policycoreutils policycoreutils-python-utils

Later on in this chapter, in the Troubleshooting with setroubleshoot section, we'll look at how to use setroubleshoot to help diagnose SELinux problems. In order to have some cool error messages to look at when we get there, go ahead and install setroubleshoot now, and activate ...