[PATCH] [Fedora] Introduce 'Ensure SELinux Not Disabled in Currently Running Kernel' rule

fcaviggi at redhat.com fcaviggi at redhat.com
Fri Oct 4 18:55:36 UTC 2013


Jan,

Doh. The '/selinux/enforce' was RHEL 6 - for Fedora 19 - it's 
'/sys/fs/selinux/enforce'

-Frank


On 10/04/2013 02:49 PM, fcaviggi at redhat.com wrote:
> Jan,
>
> You might consider checking if the '/selinux/enforce' file exists and 
> the file contains '1' (1 is enforcing). That would ensure that SELinux 
> enabled and enforcing the policy.
>
> Regards,
>
> Frank Caviggia
>
>
> On 10/04/2013 01:11 PM, Jan Lieskovsky wrote:
>> Introduce new SELinux section of the guide and first rule
>> for it - check if SELinux is enabled in currently
>> booted kernel.
>>
>> Please review.
>>
>> Thank you && Regards, Jan.
>> --
>> Jan iankko Lieskovsky / Red Hat Security Technologies Team
>>
>>
>> _______________________________________________
>> scap-security-guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>
>
> -- 
> Frank Caviggia
> Consultant, Public Sector
> fcaviggi at redhat.com
> (M) (571) 295-4560
>
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide


-- 
Frank Caviggia
Consultant, Public Sector
fcaviggi at redhat.com
(M) (571) 295-4560

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131004/8478f4f5/attachment.html>


More information about the scap-security-guide mailing list