Loading...

SELinux Configuration

If you have SELinux enabled on the client computer, depending on the configured mode and policy, you might need to create a SELinux policy module as a root user before you install Commvault packages or perform a backup operation. Install the SELinux development package on the client computer.

Note that SELinux currently supports MLS policy for Linux File System Agent only. OnePass and IntelliSnap features are not supported.

Following are the different policies, modes, and the necessary steps required to configure SELinux.

SELinux status

Current mode

Policy

Steps to follow

Disabled

Disabled

NA

No configuration required.

Enabled

Permissive

Targeted

No configuration required. SELinux prints warnings instead of enforcing security policy.

Enabled

Permissive

(Multi-Level Security) MLS

No configuration required. SELinux prints warnings instead of enforcing security policy.

Enabled

Enforcing

Targeted

Depending on client settings, policies might need to be configured. See Troubleshooting SELinux Configuration.

Enabled

Enforcing

(Multi-Level Security) MLS

Configure SELinux as a root user or an equivalent user who is mapped to SELinux staff user and has root privileges. See Configuring SELinux for Commvault.

Last modified: 7/3/2018 7:22:52 AM