Deploy Dell PowerFlex v3.6.x

SDC (scini) driver configuration for SELinux

SELinux may prevent the scini driver from starting on RHEL-based SDC nodes.

1. On the SDC, use a text editor to create two text files, in any directory:
   1. Create a file called scini.fe, and add the following text to it:

      /usr/bin/emc/scaleio/(.*).ko  system_u:object_r:modules_object_t:s0
      /bin/emc/scaleio/(.*).ko  system_u:object_r:modules_object_t:s0

   2. Create a file called scini.te, and add the following text to it:

      module scini 1.0;
      
      require {
              type insmod_t;
              type modules_object_t;
              class system module_load;
      }

2. Build and install the SELinux module, by running the following commands:

   checkmodule -M -m scini.te -o scini.mod
   semodule_package -o scini.pp -m scini.mod -f scini.fe
   semodule -i scini.pp
   restorecon -R -v /bin/emc/scaleio/

3. To check the current configuration, run the command:

   sestatus

   Output similar to the following should be displayed, showing that SELinux status is "enabled", and Current mode is "enforcing":

   SELinus status: enabled
   SELinuxfs mount: /sys/fs/selinux
   SELinux root directory: /etc/selinux
   Loaded policy name: targeted
   Current mode: enforcing
   Mode from config file: enforcing
   Policy MLS status: enabled
   Policy deny_unknown status: allowed
   Memory protection checking: actual (secure)
   Max kernel policy version: 31

4. To check that the scini module is configured in SELinux, run the command:

   semodule --list=full | grep scini

   Output similar to the following should be displayed:

   400	scini				pp

5. Start the scini service:

   service scini start