SELinux is based on the least level of access required for a service to run. Services can be run in a variety of ways; therefore, you need to specify how you run your services. Use the following Booleans to set up SELinux:
- When enabled, this Boolean allows users to connect to the local MariaDB server.
- When enabled, this Boolean allows the
eximmailer to initiate connections to a database server.
- When enabled, this Boolean allows
ftpdaemons to initiate connections to a database server.
- Enabling this Boolean is required for a web server to communicate with a database server.
Due to the continuous development of the SELinux policy, the list above might not contain all Booleans related to the service at all times. To list them, enter the following command:
~]$Enter the following command to view description of a particular Boolean:
getsebool -a | grep service_name
~]$Note that the additional policycoreutils-devel package providing the
sepolicy booleans -b boolean_name
sepolicyutility is required for this command to work.