=================================
Running SELinux in enforcing mode
=================================


To run SELinux in Enforcing mode, a few ports must be set up using the
``semanage port`` command.

The ``semange`` command relies on ``policycoreutils-python``. To install
``policycoreutils-python``, if needed, run:

.. code-block:: bash

   sudo yum -y install policycoreutils-python

Enable ports 9200 and 9300 for Elasticsearch:

.. code-block:: bash

    sudo semanage port -a -t http_port_t -p tcp 9200
    sudo semanage port -a -t http_port_t -p tcp 9300
