If you have SELinux enabled on the client computer, depending on the configured mode and policy, you might need to create a SELinux policy module as a root user before you install Commvault packages or perform a backup operation. Install the SELinux development package on the client computer.
Note that SELinux currently supports MLS policy for Linux File System Agent only. File Archiving and IntelliSnap features are not supported.
Following are the different policies, modes, and the necessary steps required to configure SELinux.
|
SELinux status |
Current mode |
Policy |
Steps to follow |
|---|---|---|---|
|
Disabled |
Disabled |
NA |
No configuration required. |
|
Enabled |
Permissive |
Targeted |
No configuration required. SELinux prints warnings instead of enforcing security policy. |
|
Enabled |
Permissive |
(Multi-Level Security) MLS |
No configuration required. SELinux prints warnings instead of enforcing security policy. |
|
Enabled |
Enforcing |
Targeted |
Depending on client settings, policies might need to be configured. See Troubleshooting SELinux Configuration. |
|
Enabled |
Enforcing |
(Multi-Level Security) MLS |
Configure SELinux as a root user or an equivalent user who is mapped to SELinux staff user and has root privileges. See Configuring SELinux for Commvault. |