Select Your Language

Infrastructure and Management

Cloud Computing

Storage

Runtimes

Integration and Automation

  • Comments
  • Creating SELinux Context Type in RHEL5

    Posted on

    Our environment is running RHEL 5 and there are still a handful of servers with SELinux set to permissive mode. I've been going through the audit logs and generating policy entries as needed, but I have run into a situation where the context type I need does not exist.

     

    In order to determine what policies to generate, I've been comparing some of the AVC denial messages on my RHEL 5 boxes with some of the newer policies (CentOS 6.3 and Fedora 17) to find out if there are any entries to address the denials I'm getting. In many cases, the denials I'm getting are set to "dontaudit" in newer OS versions.

     

    What I'm running up against now is the fact that we have VMWare Tools on a few servers and that is getting flagged. When I look at my CentOS system, there are several file contexts for VMWare-related files. In the RHEL 5 policies, however, these contexts do not exist, so I can't create file contexts using 'semanage' because the 'type' is not recognized.

     

    How do I create a 'type' so that I can assign that type to a group of files on my server? I haven't been able to find much about this, so I thought I'd try posting something here.

     

    Thanks in advance for any suggestions!

    by

    points

    Responses

    Red Hat LinkedIn YouTube Facebook X, formerly Twitter

    Quick Links

    Help

    Site Info

    Related Sites

    © 2026 Red Hat