SupportAssist Enterprise Version 1.0 User's Guide

Setting up an SELinux enabled system to receive alerts

1. Open the terminal window and create a policy file named supportassistpolicy.te.
2. Open the policy file (supportassistpolicy.te) and type the following:

   module supportassistpolicy 1.0;
   
   require {
   	type websm_port_t;
   	type snmpd_t;
    	type root_t;
   	class tcp_socket name_connect;
    	class dir { write add_name };
   	class file { write getattr open create };
   }
   
   #============= snmpd_t ==============
    
   allow snmpd_t websm_port_t:tcp_socket name_connect;
   allow snmpd_t root_t:dir write;
   allow snmpd_t root_t:dir add_name;
   allow snmpd_t root_t:file { write create open getattr };

3. Save the policy file.
4. Browse to the folder where you saved the policy file.
5. Type checkmodule -M -m -o supportassistpolicy.mod supportassistpolicy.te and press Enter.
6. Type semodule_package -o supportassistpolicy.pp -m supportassistpolicy.mod and press Enter.
7. Type semodule -i supportassistpolicy.pp and press Enter.