
※ [deb based systems] # systemctl stop apparmor # apt remove apparmor ※AppArmor を無効化 ⇓ 不明 not found # apt install auditd setools policycoreutils policycoreutils-python libselinux-utils selinux-utils # sestatus ※ SELinux status: disabled # selinux-activate ※SELinuxを有効化 ※ SE Linux is activated. You may need to reboot now. # reboot # sestatus ※ SELinux status: enabled # setenforce 1 ※ [rpm based systems] # yum install audit setools setroubleshoot setroubleshoot-server policycoreutils-python-utils --------------------------------------------- ※Confirm that the auditd service is running: # systemctl start auditd ※Then do a generic search of the audit logs: # ausearch -m AVC,USER_AVC,SELINUX_ERR,USER_SELINUX_ERR -ts recent

