Although installing MediaWiki and logging in to the platform is a simple task, setting up the CMS can be challenging at times, especially when the process involves server configurations.
A critical aspect of web server security is the so-called Security-Enhanced Linux (SELinux), a feature related to Linux distributors, including Red Hat Enterprise Linux.
In the following paragraphs, we share how to check if SELinux is enabled in MediaWiki.
What is SELinux
SELinux is a security module for Linux that administers control policies and limits apps’ and users’ access to system resources.
Regarding MediaWiki, SELinux effectively prevents unauthorised access to files and provides enhanced server security for your MediaWiki project.
SELinux operates in three different modes:
- Enforcement: SELinux policies are being strictly applied.
- Permission: Policies are not strictly enforced, but different violations are being logged.
- Bypass (Disabled): SELinux is turned off and therefore doesn’t provide any kind of protective measures.
How to Check If SELinux Is Enabled in MediaWiki
Before configuring SELinux for MediaWiki, it is important to verify whether your system runs SELinux and determine its current mode.
You can approach the task via 3 different methods:
Method 1: Use the sestatus Command
The fastest and easiest way to check if SELinux is enabled in MediaWiki is by running the sestatus command in your terminal.
Once you run the command, the system will display detailed information about the current setup of SELinux, including:
- Whether SELinux is enabled
- The current mode SELinux operates in: enforcing, permissive or disabled.
- The SELinux policy that is being used right now, targeted or MLS.
- Additional relevant information.
Method 2: Check the SELinux Config File
You can manually verify the SELinux settings by inspecting the configuration file located at /etc/selinux/config.
You can open the file via a text editor or the cat command. Once you do, look for the SELINUX line in the output, which gives information about the mode the module is currently running.
- If the value is set to enforcing, SELinux actively enforces its set of rules and policies.
- If the value is set to permissive, then SELinux is running the only logs violation policies.
- Should the value display disabled, then SELinux is turned off.
Method 3: Verify if SELinux is Enabled via Audit Logs
Another method you can use to verify if SELinux is enabled is by checking the system logs in /var/log. Should SELinux be enabled, you should notice entries related to SELinux operations, such as enforcement or violation policies.
Conclusion – How to Check If SELinux Is Enabled in MediaWiki
SELinux is crucial for securing the web server environment in which MediaWiki performs. The module protects important directories such as /var/www/html, prevents unauthorized access and provides correct security context for the MediaWiki operations.
By checking if SELinux is enabled in MediaWiki, you establish a secure and reliable environment for your MediaWiki project.
Read also:
- How to Install MediaWiki
- How to Log In to MediaWiki
- How to Install MediaWiki Extensions
- How to Create a Page in MediaWiki
- How to Install a MediaWiki Skin
- How to Add Infobox Module in MediaWiki
- How to Fix MediaWiki Internal Error: A Step-By-Step Guide
- How to Find Modules in MediaWiki
- How to Enable and Customize User Glow in MediaWiki
- How to View and Manage Recent Images in MediaWiki
