Configuring SELinux

1. Find the necessary boolean to permit httpd to communicate with Zabbix.

[root@host]# getsebool -a | grep zabbix

- We'll see the boolean is *off*

2. Set the boolean to "on"

[root@host]# setsebool -P httpd_can_connect_zabbix on

3. Verify that change took effect

[root@host]# getsebool -a | grep zabbix

- Now we'll see that the boolean is *on*.

1. Check the SELinux state

[root@host]# getenforce

This will show that it is in permissive mode, so we need to change it to enforcing mode.

2. Put SELinux into enforcing mode

[root@host]# setenforce 1

3. Check to make sure SELinux is now in enforcing mode

[root@host]# getenforce

We can see our change worked and SELinux is now in enforcing mode.

4. Ensure SELinux boots into enforcing mode

   Edit the SELinux configuration file:

   [root@host]# vi /etc/selinux/config
   

   Type i to enter Insert mode, arrow down to the SELINUX line, and set it to enforcing:

   SELINUX=enforcing
   

   Type Esc, then :wq to exit. When the server boots again, SELinux will remain in enforcing mode.