Running SELinux in enforcing mode (AEN 4.2.1)
=============================================

.. raw:: html

    <p>To run SELinux in Enforcing mode, a few ports must be set up using the
    <code class="docutils literal"><span class="pre">semanage</span> <span class="pre">port</span></code> command.</p>
    <p>The <code class="docutils literal"><span class="pre">semange</span></code> command relies on <code class="docutils literal"><span class="pre">policycoreutils-python</span></code>. To install
    <code class="docutils literal"><span class="pre">policycoreutils-python</span></code>, if needed, run:</p>
    <div class="highlight-bash"><div class="highlight"><pre><span></span>sudo yum -y install policycoreutils-python
    </pre></div>
    </div>
    <p>Enable ports 9200 and 9300 for Elasticsearch:</p>
    <div class="highlight-bash"><div class="highlight"><pre><span></span>sudo semanage port -a -t http_port_t -p tcp <span class="m">9200</span>
    sudo semanage port -a -t http_port_t -p tcp <span class="m">9300</span>
    </pre></div>
    </div>
