Comments on How to Install Webmin on CentOS 8

While Cockpit may not offer all of the functionality Webmin does (that it has modules for), it is really what you should be using since it is provided by RHEL upstream and available and supported in many distributions.

Is there no where to install it with SELinux enabled. I don't understand how you provide instructions for CentOS Linux with the main reason to use it disabled.

Thanks ...

Disable SELinux? Really?

enable SELinux = GOOD, disable SELinux = BAD

That is a typical classic lack of security insight and/or just too troublesome trying to explain to people how SELinux works or what the purpose is...

To install webmin with SELinux enabled, just install as per normal and afterwards include:

sudo dnf -y --nobest install policycoreutils-python-utils

then you can review the audit logs to determine what has triggered an event:

sudo cat /var/log/audit/audit.log | grep denied

or

sudo ausearch -m AVC

From that output you can create and execute a rules file to allow the triggered event

e.g. for nginx

sudo cat /var/log/audit/audit.log | grep nginx | grep denied | audit2allow -M mynginx sudo semodule -i mynginx.pp

or

sudo ausearch -m AVC | grep -E 'http|nginx' | audit2allow -a -M mynginx_rule sudo semodule -i mynginx_rule.pp

Run the audit2allow -a command to view the Type Enforcement rule that allows the denied access:

sudo audit2allow -a

I hope this helps someone that is interested in keeping their system secure.

Cheers,

--- g ---