SELinux activation configuration
Enable SELinux on a Rocky-based server and make sure that the samba and nfs services work properly with a strict and secure SELinux configuration. Conducts the corresponding access tests.
The stage consists of two machines, our server is based on Rocky 9 and our client is a Debian 12.
On our server we will have SELinux enabled in enforcing mode.
[rocky@rocky-javiercruces ~]$ sestatus SELinux status: enabled SELinuxfs mount: /sys/fs/selinux SELinux root directory: /etc/selinux Loaded policy name: targeted Current mode: enforcing Mode from config file: enforcing Policy MLS status: enabled Policy deny_unknown status: allowed Memory protection checking: actual (secure) Max kernel policy version: 33 We will start by updating the packages needed to configure samba and nfs: