AEM 6.5 and SELinux (is it supported?) | Community
Skip to main content
this-that-the-otter
this-that-the-otterAccepted solution
Level 4
May 3, 2025

Adobe support said there's no reason it shouldn't work as long as the policy is unconfined enough, but my recollection from the ticket is that Adobe does not provide help configuring SELinux.

 

One thing you can do on RHEL if running into issues: 

 

sealert -a /var/log/audit/audit.log

 

This command should provide the additional commands required to allow whatever might be required for AEM. You may need to run it many times to get a policy that is permissive enough for AEM.

 

You should be careful not to permit anything that might be reported via sealert that is not required by AEM.

View reply

3 replies

lukasz-m
lukasz-m
New Participant
April 6, 2025

Hi @this-that-the-otter,

Looking into official documentation in to the section about supported platform it seems that SELinux is not supported:

Additionally in the section related to Dynamic Media Add-on, it is clearly indicated to disable SELinux.

Even if you would be able to run AEM 6.5 with SELinux, you may not get any help from Adobe in case of any issue etc.

Translate
    this-that-the-otter
    this-that-the-otterAuthor
    Level 4
    April 6, 2025

    Thanks for the info, I had seen this too. I'm pretty sure we're not running AEM Dynamic Media Add-on. In this case I wonder if there are any other things that might break? In testing, I think we've been able to get a policy in place that allows us to start and stop the author and publish services successfully but our SAML2 login seems to have suddenly stopped working with error: Invalid SAML Token. This is possibly unrelated but will take some debugging to determine. 

    Translate
    this-that-the-otter
    this-that-the-otterAuthorAccepted solution
    Level 4
    May 3, 2025

    Adobe support said there's no reason it shouldn't work as long as the policy is unconfined enough, but my recollection from the ticket is that Adobe does not provide help configuring SELinux.

     

    One thing you can do on RHEL if running into issues: 

     

    sealert -a /var/log/audit/audit.log

     

    This command should provide the additional commands required to allow whatever might be required for AEM. You may need to run it many times to get a policy that is permissive enough for AEM.

     

    You should be careful not to permit anything that might be reported via sealert that is not required by AEM.

    Translate
      Terms & ConditionsAccessibility statement

      Loading footer...