Does Cortex XDR agent require SELinux enabled on RHEL 8

tejaspatil12 — Fri, 31 May 2024 05:42:04 GMT

Hello All,

Could you please let me help me understand, whether Cortex XDR agent require SElinux enabled on Linux RHEL 8?

Requirement document there is no clear information regarding this and also let me know why this SElinux is required.

Thanks in advance.

Re: Does Cortex XDR agent require SELinux enabled on RHEL 8

aspatil — Mon, 03 Jun 2024 16:21:13 GMT

We don't ask to install SElinux, it's upto your call whether to enable it or not. It is basically an Anti Exploit module by Linux.

If you intend to use SELinux, make sure to enable it before you proceed with the Cortex XDR agent installation. This ensures that the agent disables any injection-based modules that cause compatibility issues(Due to this the agent operational status changes to Partially Protected). If you later enable SELinux or change its operation mode, you must reinstall the agent to avoid any compatibility issues.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/7.9/Cortex-XDR-Agent-Administrator-Guide/Cortex-XDR-Agent-7.9-for-Linux

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution".

topic Does Cortex XDR agent require SELinux enabled on RHEL 8 in Cortex XDR Discussions

Does Cortex XDR agent require SELinux enabled on RHEL 8

Re: Does Cortex XDR agent require SELinux enabled on RHEL 8