MCS Requirements
Before configuring a system for MCS, fulfill the following requirements:
- SELinux must be configured in
enforcing
mode. - SELinux must be configured to use either the
targeted
ormls
policies. - The
policycoreutils-python-utils
package must be installed so you can use the chcat and semanage commands. - The
setools-console
package can be installed to use the seinfo command for verification. - SELinux confined user mappings are typical when using MCS. For example, nonprivileged
users are assigned to
user_u
, while privileged users are assigned tostaff_u
. It is helpful to have any user mappings defined before configuring MCS. See Administering SELinux Users.