SELinux Configuration

Linux

Audience
Public
Product
FlashBlade
FlashArray
Technology Integrations
Linux
Source Type
Documentation

SELinux with FC Storage

SELinux does not directly govern FC transport, but it controls access to block device nodes and LVM operations.

getenforce
sestatus

# Check for denials related to multipath or block devices
sudo ausearch -m avc -ts recent | grep -E "multipath|dm-"

# If denials found, generate policy
sudo ausearch -m avc -ts recent | audit2allow -M fc_multipath
sudo semodule -i fc_multipath.pp

Allow raw block device access if needed:

sudo setsebool -P virt_use_rawio 1