1. Administering SELinux
  2. Extending SELinux Policies with Multi-Category Security
  3. MCS Requirements

MCS Requirements

Before configuring a system for MCS, fulfill the following requirements:

  • SELinux must be configured in enforcing mode.
  • SELinux must be configured to use either the targeted or mls policies.
  • The policycoreutils-python-utils package must be installed so you can use the chcat and semanage commands.
  • The setools-console package can be installed to use the seinfo command for verification.
  • SELinux confined user mappings are typical when using MCS. For example, nonprivileged users are assigned to user_u, while privileged users are assigned to staff_u. It is helpful to have any user mappings defined before configuring MCS. See Administering SELinux Users.