SELinux config for v6 on RHEL 9

V6.0.5 / RHEL 9.1

Are there steps to configure selinux on RHEL9? The instructions in Configure SELinux point to a git repo to run some make installs, but the release notes in there say RHEL 7 & 8 only. Are there steps for RHEL 9?

I tried it to see what would happen and I’m getting some errors. I’m not sure if it’s related to the release or the way I brought the repo onto the server (download onto a pc and moved up the server). It’s failing in the make looking for mongodb-enterprise-server or mongodb-org-server with “not found” which makes me think i missed something in the repo.


[root@]#cd mongodb-selinux-master/

(cd selinux; make -f /usr/share/selinux/devel/Makefile)
make[1]: Entering directory '/home/xx/Mongo/mongodb-selinux-master/selinux'
Compiling targeted mongodb module
Creating targeted mongodb.pp policy package
rm tmp/mongodb.mod.fc tmp/mongodb.mod
make[1]: Leaving directory '/home/xx/Mongo/mongodb-selinux-master/selinux'
mkdir -p build/targeted
mv selinux/mongodb.pp build/targeted/

[root@]# make install
cp build/targeted/mongodb.pp /usr/share/selinux/targeted/mongodb.pp
/usr/sbin/semodule --priority 200 --store targeted --install /usr/share/selinux/targeted/mongodb.pp
libsemanage.semanage_direct_install_info: Overriding mongodb module at lower priority 100 with module at priority 200.
/sbin/fixfiles -R mongodb-enterprise-server restore || true
mongodb-enterprise-server not found

/sbin/fixfiles -R mongodb-org-server restore || true
mongodb-org-server not found

/sbin/restorecon -R /var/lib/mongo || true
/sbin/restorecon -R /run/mongodb || true
/sbin/restorecon: lstat(/run/mongodb) failed: No such file or directory

[root@]# systemctl status mongod
Failed to get properties: Access denied

Thanks for any guidance

Sorry I just saw this under the configure selinux

Starting in MongoDB 5.0, a new SELinux policy is available for MongoDB installations that:

* Use an `.rpm` installer.
* Use default configuration settings.
* Run on RHEL7 or RHEL8.

If your installation does not meet these requirements, refer to the [SELinux Instructions]( for `.tgz` packages.

Let me give these a shot

1 Like