SELinux Configuration

• The SELinux security mechanism enabled by default in the Linux OS makes the TEE function unavailable. If you want to use SELinux in your OS, manually configure SELinux rules.
• Disabling SELinux may cause security issues. If you do not plan to enable SELinux, it is advised to implement an end-to-end solution to mitigate the risks arising from disabling SELinux; in this case, you shall assume all associated security risks. If you need to enable SELinux, configure fine-grained security rules based on actual SELinux issues to ensure system security.

Perform the following operations on the KVM to configure SELinux.

• Disable SELinux temporarily.

  setenforce 0

• Disabling SELinux permanently (taking effect after the system is restarted)

  sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config