82 lines
3.8 KiB
Markdown
82 lines
3.8 KiB
Markdown
|
# SELinux Cookbook
|
|||
|
|
|
|||
|
|
[](https://supermarket.chef.io/cookbooks/selinux)
|
|||
|
|
[](https://github.com/sous-chefs/selinux/actions?query=workflow%3Aci)
|
|||
|
|
[](#backers)
|
|||
|
|
[](#sponsors)
|
|||
|
|
[](https://opensource.org/licenses/Apache-2.0)
|
|||
|
|
|
|||
|
|
## Description
|
|||
|
|
|
|||
|
|
The SELinux (Security Enhanced Linux) cookbook provides recipes for manipulating SELinux policy enforcement state.
|
|||
|
|
|
|||
|
|
SELinux can have one of three settings:
|
|||
|
|
|
|||
|
|
`Enforcing`
|
|||
|
|
|
|||
|
|
- Watches all system access checks, stops all 'Denied access'
|
|||
|
|
- Default mode on RHEL systems
|
|||
|
|
|
|||
|
|
`Permissive`
|
|||
|
|
|
|||
|
|
- Allows access but reports violations
|
|||
|
|
|
|||
|
|
`Disabled`
|
|||
|
|
|
|||
|
|
- Disables SELinux from the system but is only read at boot time. If you set this flag, you must reboot.
|
|||
|
|
|
|||
|
|
Disable SELinux only if you plan to not use it. Use `Permissive` mode if you just need to debug your system.
|
|||
|
|
|
|||
|
|
## Requirements
|
|||
|
|
|
|||
|
|
- Chef 15.3 or higher
|
|||
|
|
|
|||
|
|
## Platform
|
|||
|
|
|
|||
|
|
- RHEL 7+
|
|||
|
|
- CentOS 7+
|
|||
|
|
- Fedora
|
|||
|
|
- Ubuntu
|
|||
|
|
- Debian
|
|||
|
|
|
|||
|
|
## Resources
|
|||
|
|
|
|||
|
|
The following resources are provided:
|
|||
|
|
|
|||
|
|
- [selinux_boolean](documentation/selinux_boolean.md)
|
|||
|
|
- [selinux_fcontext](documentation/selinux_fcontext.md)
|
|||
|
|
- [selinux_install](documentation/selinux_install.md)
|
|||
|
|
- [selinux_module](documentation/selinux_module.md)
|
|||
|
|
- [selinux_permissive](documentation/selinux_permissive.md)
|
|||
|
|
- [selinux_port](documentation/selinux_port.md)
|
|||
|
|
- [selinux_state](documentation/selinux_state.md)
|
|||
|
|
|
|||
|
|
## Maintainers
|
|||
|
|
|
|||
|
|
This cookbook is maintained by the Sous Chefs. The Sous Chefs are a community of Chef cookbook maintainers working together to maintain important cookbooks. If you’d like to know more please visit [sous-chefs.org](https://sous-chefs.org/) or come chat with us on the Chef Community Slack in [#sous-chefs](https://chefcommunity.slack.com/messages/C2V7B88SF).
|
|||
|
|
|
|||
|
|
## Contributors
|
|||
|
|
|
|||
|
|
This project exists thanks to all the people who [contribute.](https://opencollective.com/sous-chefs/contributors.svg?width=890&button=false)
|
|||
|
|
|
|||
|
|
### Backers
|
|||
|
|
|
|||
|
|
Thank you to all our backers!
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Sponsors
|
|||
|
|
|
|||
|
|
Support this project by becoming a sponsor. Your logo will show up here with a link to your website.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|