Install policycoreutils Package
An XCCDF Rule
Description
The policycoreutils package can be installed with the following command:
$ sudo yum install policycoreutils
Rationale
Security-enhanced Linux is a feature of the Linux kernel and a number of utilities
with enhanced security functionality designed to add mandatory access controls to Linux.
The Security-enhanced Linux kernel contains new architectural components originally
developed to improve security of the Flask operating system. These architectural components
provide general support for the enforcement of many kinds of mandatory access control
policies, including those based on the concepts of Type Enforcement, Role-based Access
Control, and Multi-level Security.
policycoreutils contains the policy core utilities that are required for
basic operation of an SELinux-enabled system. These utilities include load_policy
to load SELinux policies, setfiles to label filesystems, newrole to
switch roles, and so on.
- ID
- xccdf_org.ssgproject.content_rule_package_policycoreutils_installed
- Severity
- Low
- References
- Updated
Remediation - script:bootc
dnf install policycoreutils
Remediation - Puppet
include install_policycoreutils
class install_policycoreutils {
package { 'policycoreutils':
ensure => 'installed',
}
Remediation - Ansible
- name: Gather the package facts
package_facts:
manager: auto
tags:
- CCE-82976-2
- DISA-STIG-RHEL-08-010171
Remediation - script:kickstart
package install policycoreutils
Remediation - OS Build Blueprint
[[packages]]
name = "policycoreutils"
version = "*"
Remediation - Anaconda Pre-Install Instructions
package --add=policycoreutils
Remediation - Shell Script
# Remediation is applicable only in certain platforms
if rpm --quiet -q kernel; then
if ! rpm -q --quiet "policycoreutils" ; then
yum install -y "policycoreutils"
fi