Yum install policycoreutils-python-2.0.86_64 Next i created a local repository to install them: I downloaded policycoreutils-python-2.0.86_64 and dependencies from the koji website. You can repeat this process (incrementing the file name: local002, local003, etc.) for future authorizations that you need to make. Semodule_package -o local001.pp -m local001.modįinally, you can re-enable enforcing mode: You can examine the policy created (/etc/local-selinux-policy/local001.te), and then load it with:Ĭheckmodule -M -m -o local001.mod local001.te Once the audits have appeared, create a local policy using audit2allow:Īudit2allow -l -a -m local001 > /etc/local-selinux-policy/local001.te Now recreate the situation that causes the audit (stop/start vsftpd, transfer files, etc.). Then, reload policy to get a clean start for audit2allow, and set permissive mode to collect all required authorizations: Yum install selinux-policy-targeted policycoreutils libselinux selinux-policy libselinux-python libselinux-devel policycoreutils-python libselinux policycoreutils-gui libselinux-utils policycoreutils-sandbox checkpolicy

First, make sure you have the necessary packages installed (all the following as root):

You'll need to create a local policy to allow the access.

Setools redhat