OpenStack for Architects - Second Edition

SELinux and sVirt in action

The following instructions will allow you to check whether SELinux is enforcing (active and protecting). Since in your lab you're running CentOS 7, you should have SELinux installed and enforcing as well as all of the installed software to make sVirt work. We will show you how to set permissions on image files in order to protect your instances:

1. Execute the following commands as root on the lab server:

Normally, in an HA environment, you would execute this command on a compute node.

# getenforce Enforcing

Verify that the command responds with Enforcing.

2. If, for some reason, it is any other answer, do the following and repeat the preceding command:

    # setenforce 1

3. Now, check your ID and your context:

# id ...