To install MACC with SELinux, follow any of the options below.
Option 1
To install MACC with RHEL 8 SELinux in "Enforcing" mode:
- Run the following commands:
# semanage fcontext -a -e /lib/modules /usr/local/mcafee/solidcore/kmod
# restorecon -Rv /usr/local/mcafee/solidcore/kmod/
- Follow the onscreen prompts to tnstall MACC on your RHEL 8 server.
Option 2
MACC Linux also supports SELinux in Permissive mode. In this mode, the SELinux policy is not enforced and access is not denied.
Denials are logged for actions that would have been denied if run in enforcing mode and not configured.
To set SELinux in Permissive mode, use one of the following methods:
- Edit the SELinux main configuration file: /etc/selinux/config
- Set: SELINUX=permissive
- Reboot your system after the change.
- Run the following command:
sudo sed -i 's/^SELINUX=.*/SELINUX=permissive/g' /etc/selinux/config
- To verify that the above command was sucessful, run:
$ cat /etc/selinux/config | grep SELINUX= | grep -v ^#
The output must display:
SELINUX=permissive
Option 3
If the above options do not work, disable SELinux and reboot and verify that MACC can be enabled.
To permanently disable SELinux, use one of the following methods:
- Edit the main configuration file of SELinux here: /etc/selinux/config
- Set: SELINUX=disabled
- Reboot your system after you make the change.
- Run the following command:
sudo sed -i 's/^SELINUX=.*/SELINUX=disabled/g' /etc/selinux/config
- To verify that the above command was sucessful, run:
$ cat /etc/selinux/config | grep SELINUX= | grep -v ^#
The output must display:
SELINUX=disabled
For more information about SELinux, see
Red Hat Documentation.
