14.04 SELinux – SELinux Implementation in Ubuntu

14.04selinux

How does Ubuntu implements SELinux…? what are the pacakges(modules) involved in implementation of SELinux on Ubuntu

Best Answer

How does Ubuntu implements SELinux...?

selinux is not installed or enabled by default. We use apparmor by default. The Ubuntu wiki page for SELinux even claims ...

Warning

The Ubuntu-specific "selinux" and "selinux-policy-ubuntu" packages documented here have not received much attention since Karmic, and appear to be effectively broken in Precise.

If you wish to use SELinux in Ubuntu, the "selinux-basics" and "selinux-policy-default" packages from Debian are still being actively maintained. Documentation relevant to those packages can be found at http://wiki.debian.org/SELinux

but also contains instruction on how to install it:

SELinux in Ubuntu

SELinux can be enabled in Ubuntu by installing the "selinux" meta-package, which will make the needed changes to the system, and install the Tresys policies for Ubuntu:
sudo apt-get install selinux
After installation, you will be prompted to reboot the system to label and activate SELinux.

But it might be smarter to install the debian packages manually...

What are the packages(modules) involved?

Related Solutions

Ubuntu – SELinux is not enabled

This error might be because you are running AppArmor along with SELinux. AppArmor is installed by default in Ubuntu. You can't use 2 LSM (Linux security modules) at the same time. You need to remove AppArmor if you wish yo use SELinux

See an aswer here: Is it a bad idea to run SELinux and AppArmor at the same time?

Ubuntu – How to change selinux modes permissive to enforce in ubuntu 14.04

Simply run setenforce 1 as root. One way to do this is to run sudo setenforce 1.

You can verify that it succeeded by running sestatus and examining the output.

[root@ec2-54-183-55-79 filebeat]# setenforce 1
[root@ec2-54-183-55-79 filebeat]# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   enforcing
Mode from config file:          enforcing
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Max kernel policy version:      28

Best Answer

Related Solutions

Ubuntu – SELinux is not enabled

Ubuntu – How to change selinux modes permissive to enforce in ubuntu 14.04

Related Question