11.2. Implantação de fapolicida

Procedimento

1. Instale o pacote fapolicyd:

   # yum install fapolicyd

   Copy to Clipboard Toggle word wrap

2. Habilite e inicie o serviço fapolicyd:

   # systemctl enable --now fapolicyd

   Copy to Clipboard Toggle word wrap

Etapas de verificação

1. Verifique se o serviço fapolicyd está funcionando corretamente:

   # systemctl status fapolicyd
   ● fapolicyd.service - File Access Policy Daemon
      Loaded: loaded (/usr/lib/systemd/system/fapolicyd.service; enabled; vendor p>
      Active: active (running) since Tue 2019-10-15 18:02:35 CEST; 55s ago
     Process: 8818 ExecStart=/usr/sbin/fapolicyd (code=exited, status=0/SUCCESS)
    Main PID: 8819 (fapolicyd)
       Tasks: 4 (limit: 11500)
      Memory: 78.2M
      CGroup: /system.slice/fapolicyd.service
              └─8819 /usr/sbin/fapolicyd
   
   Oct 15 18:02:35 localhost.localdomain systemd[1]: Starting File Access Policy D>
   Oct 15 18:02:35 localhost.localdomain fapolicyd[8819]: Initialization of the da>
   Oct 15 18:02:35 localhost.localdomain fapolicyd[8819]: Reading RPMDB into memory
   Oct 15 18:02:35 localhost.localdomain systemd[1]: Started File Access Policy Da>
   Oct 15 18:02:36 localhost.localdomain fapolicyd[8819]: Creating database

   Copy to Clipboard Toggle word wrap

2. Entre como um usuário sem privilégios de raiz e verifique se fapolicyd está funcionando, por exemplo:

   $ cp /bin/ls /tmp
   $ /tmp/ls
   bash: /tmp/ls: Operation not permitted

   Copy to Clipboard Toggle word wrap