As SELinux is a bit of complicated compared to the tools that we use currently, I have thought it is good to have some tips here.
1) seinfo: This is the selinux query tool to see statistics about your policy.
[root@rh54-3 ~]# seinfo
Statistics for policy file: /etc/selinux/targeted/policy/policy.21
Policy Version & Type: v.21 (binary, MLS)
Classes: 61 Permissions: 220
Types: [...]
When SELinux and BIND are together, there is not much to say as there are only two booleans that you can toggle as you can see below;
[root@rh54-2 named]# getsebool -a | grep named
named_disable_trans –> off
named_write_master_zones –> off
SELinux (Security Enhanced Linux) is something that some of us may be afraid of because once it is enabled network services start to behave abnormally. However once it is configured properly you can restrict processes and enforce their access to files and directories as you wish. In this article we will speak briefly about integration [...]