seLinux default setup access denies in Ubuntu Desktop 20.04

Started by kalpana, Nov 06, 2023, 03:31 AM

Previous topic - Next topic

kalpana

Hello!

I am learning ways to harden a Linux system, specifically with seLinux and access control mechanisms it implements.
Following this guide (with remarks for Ubuntu):

https://wiki.debian.org/SELinux

I have managed to setup seLinux in permissive mode.
However, looking at the audit logs for AVC entries shows that there are lots of denials after system booting, e.g. from accountsd_t, avahi_t, NetworkManager_t, and loots other source context types.
There are 3499 access denies in total, so I guess the system will fail to boot the userland if seLinux mode is switched to enforcing.

Before digging any further, I wanted to figure out if seLinux in Ubuntu requires some different setup procedure (different packages installed than those on that wiki or whatever) or if it is not maintained.
Has anyone tried to setup seLinux in enforcing mode on Ubuntu LTS successfully?