Does anyone know if AEM can be run under SELinux and if it is a supported configuration?
Solved! Go to Solution.
Views
Replies
Total Likes
Adobe support said there's no reason it shouldn't work as long as the policy is unconfined enough, but my recollection from the ticket is that Adobe does not provide help configuring SELinux.
One thing you can do on RHEL if running into issues:
sealert -a /var/log/audit/audit.log
This command should provide the additional commands required to allow whatever might be required for AEM. You may need to run it many times to get a policy that is permissive enough for AEM.
You should be careful not to permit anything that might be reported via sealert that is not required by AEM.
Looking into official documentation in to the section about supported platform it seems that SELinux is not supported:
Additionally in the section related to Dynamic Media Add-on, it is clearly indicated to disable SELinux.
Even if you would be able to run AEM 6.5 with SELinux, you may not get any help from Adobe in case of any issue etc.
Thanks for the info, I had seen this too. I'm pretty sure we're not running AEM Dynamic Media Add-on. In this case I wonder if there are any other things that might break? In testing, I think we've been able to get a policy in place that allows us to start and stop the author and publish services successfully but our SAML2 login seems to have suddenly stopped working with error: Invalid SAML Token. This is possibly unrelated but will take some debugging to determine.
Views
Replies
Total Likes
Adobe support said there's no reason it shouldn't work as long as the policy is unconfined enough, but my recollection from the ticket is that Adobe does not provide help configuring SELinux.
One thing you can do on RHEL if running into issues:
sealert -a /var/log/audit/audit.log
This command should provide the additional commands required to allow whatever might be required for AEM. You may need to run it many times to get a policy that is permissive enough for AEM.
You should be careful not to permit anything that might be reported via sealert that is not required by AEM.
Views
Likes
Replies
Views
Likes
Replies
Views
Likes
Replies