From 4137d33f0cde4674b987d5b6920465e20098f425 Mon Sep 17 00:00:00 2001 From: Colleen Murphy Date: Mon, 10 May 2021 10:38:35 -0700 Subject: [PATCH] Add note about how to check SELinux status --- content/rancher/v2.5/en/security/selinux/_index.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/content/rancher/v2.5/en/security/selinux/_index.md b/content/rancher/v2.5/en/security/selinux/_index.md index fe707e064e2..1dd90df7522 100644 --- a/content/rancher/v2.5/en/security/selinux/_index.md +++ b/content/rancher/v2.5/en/security/selinux/_index.md @@ -9,7 +9,12 @@ _Available as of v2.5.8_ Developed by Red Hat, it is an implementation of mandatory access controls (MAC) on Linux. Mandatory access controls allow an administrator of a system to define how applications and users can access different resources such as files, devices, networks and inter-process communication. SELinux also enhances security by making an OS restrictive by default. -After being historically used by government agencies, SELinux is now industry standard and is enabled by default on CentOS 7 and 8. +After being historically used by government agencies, SELinux is now industry standard and is enabled by default on CentOS 7 and 8. To check whether SELinux is enabled and enforcing on your system, use `getenforce`: + +``` +# getenforce +Enforcing +``` We provide two RPMs (Red Hat packages) that enable Rancher products to function properly on SELinux-enforcing hosts: `rancher-selinux` and `rke2-selinux`.