I'm curious if anyone has managed to get Jira Data Center working with SELinux set to enforcing mode on RHEL 8 or 9. I've seen plenty of guides that recommend just setting SELinux to permissive or turning it off entirely, but that's not really the solution I'm looking for. Atlassian themselves suggest disabling it or figuring it out, which isn't particularly helpful. I'm hoping to find a proper policy module that works without resorting to chcon hacks. Is it worth trying to get SELinux to work properly, or does everyone just run it in permissive mode in production?
1 Answer
SELinux should always be enabled for security reasons. If you're managing software that isn't from official repos, you might run into issues. But if you're using the official httpd as a reverse proxy, it shouldn't be too tricky — just adjust some SELinux booleans to allow the necessary connections. Also, watch out for folder inheritances when unpacking files; you can manage labels easily if needed. Honestly, any guide that tells you to just turn off SELinux should be disregarded. It's been vital for over two decades, so it’s definitely manageable just like systemd.
Absolutely, disabling SELinux was never an option for me either. It’s good to know that someone else feels the same. I'll definitely take your advice about labels!