Skip to content

[FEATURE] Make Meza work with SELinux in 'enforcing' mode #229

@freephile

Description

@freephile

Is your feature request related to a problem? Please describe.

SELinux was initially enabled in the project, however it appears to have been set to 'permissive' while in development and never actualized into the default mode 'enforcing'.

Describe the solution you'd like

Ensure that Meza's secontext is 'enforcing'

Describe alternatives you've considered

Having SELinux in permissive mode - where failures are simply logged instead of blocked - is not acceptable practice for a production system deployed in an enterprise environment. Disabling SELinux altogether is similarly a non-starter.

Additional context

Having SELinux in 'enforcing' mode gives clear guidance on the proper mode in other distributions like Debian/Ubuntu where the AppArmor system is used in place of SELinux.

Environment

  • meza version: Meza 43.60.6-8-gea8482e
    Commit ea8482e
    Mediawiki EZ Admin

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions