To prepare an SELinux-enabled NFM-P Release 22.9 or later system for an upgrade

Purpose

Perform this procedure if:

  • You are about to upgrade an NFM-P system.

AND

In order to upgrade an NFM-P system in which SELinux is enabled before the upgrade, the following conditions must be true during the upgrade; performing this procedure ensures that the conditions are met.

  • SELinux remains enabled in the system.

  • SELinux is in permissive mode.

See “What is SELinux?” in the NSP System Administrator Guide for information about configuring SELinux.

Note: You require the following user privileges:

  • on each main and auxiliary server station — root, nsp

  • on each main database station — root

Note: The following RHEL CLI prompts in command lines denote the active user, and are not to be included in typed commands:

  • # —root user

  • bash$ —nsp user

Steps
 
1 

As the root user, enter the following on each main server, main database, and auxiliary server station to verify that SELinux is enabled:

# sestatus ↵

SELinux is enabled if the following is displayed:

SELinux status: enabled

2 

Perform one of the following:

  1. If SELinux is not enabled, perform “How do I enable SELinux on the NFM-P?” in the NSP System Administrator Guide.

  2. Enter the following as the root user on each main server, main database, and auxiliary server station to switch to SELinux permissive mode:

    Note: You do not need to stop any NFM-P processes in order to switch from enforcing mode to permissive mode.

    # /opt/nsp/nfmp/config/selinux/tools/bin/selinuxenable.sh -p ↵

3 

Enter the following as the root user on each main server, main database, and auxiliary server station to verify that SELinux is enabled in permissive mode:

# getenforce ↵

SELinux is in permissive mode if the following is displayed:

Permissive

4 

Close the open console windows.

End of steps