-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Labels
enhancementNew feature or requestNew feature or request
Description
Is your feature request related to a problem? Please describe.
SELinux was initially enabled in the project, however it appears to have been set to 'permissive' while in development and never actualized into the default mode 'enforcing'.
Describe the solution you'd like
Ensure that Meza's secontext is 'enforcing'
Describe alternatives you've considered
Having SELinux in permissive mode - where failures are simply logged instead of blocked - is not acceptable practice for a production system deployed in an enterprise environment. Disabling SELinux altogether is similarly a non-starter.
Additional context
Having SELinux in 'enforcing' mode gives clear guidance on the proper mode in other distributions like Debian/Ubuntu where the AppArmor system is used in place of SELinux.
Environment
- meza version: Meza 43.60.6-8-gea8482e
Commit ea8482e
Mediawiki EZ Admin
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or request