CCE-90992-9Platform: rhel7 | Date: (C)2017-06-29 (M)2022-10-10 |
Enable the SELinux Context Restoration Service (restorecond)
The restorecond service utilizes inotify to look for the creation of new files listed in the /etc/selinux/restorecond.conf configuration file. When a file is created, restorecond ensures the file receives the proper SELinux security context. The restorecond service can be enabled with the following command:
# chkconfig --level 2345 restorecond on
Parameter:
Technical Mechanism:
chkconfig --level 2345 restorecond on
Fix:
No Remediation Info
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: