Test Trellix ENS for Linux processes are running in SELinux confinement mode

Verify the SELinux policy modules are loaded appropriately.

# semodule -l | grep -i mfe

The sample output on applying this command is:

# semodule -l | grep -i mfe
mfe_ens_esp     10.7.0
mfe_ens_fw      10.7.0
mfe_ens_rt      10.7.0
mfe_ens_tp      10.7.0

Verify whether Trellix ENS for Linux processes are running in SELinux confinement.

# ps auxZ | grep -E 'mfeespd|mfefwd|mfetpd' | grep -v grep

The sample output on applying this command is:

#  ps auxZ | grep -E 'mfeespd|mfefwd|mfetpd' | grep -v grep
system_u:system_r:mfe_ens_espd_t:s0 root 15710  0.0  0.1 639428 11480 ?        Ssl  08:35   0:00 /opt/McAfee/ens/esp/bin/mfeespd
system_u:system_r:mfe_ens_tpd_t:s0 root  15840  0.1  0.4 1639416 39332 ?       Ssl  08:35   0:01 /opt/McAfee/ens/tp/bin/mfetpd
system_u:system_r:mfe_ens_tpd_t:s0 root  15860  0.0  0.2 902800 23716 ?        Sl   08:35   0:00 /opt/McAfee/ens/tp/bin/mfetpd
system_u:system_r:mfe_ens_tpd_t:s0 root  15862  0.0  0.2 902800 22120 ?        Sl   08:35   0:00 /opt/McAfee/ens/tp/bin/mfetpd
system_u:system_r:mfe_ens_tpd_t:s0 root  15870  0.0  0.3 907976 27056 ?        Sl   08:35   0:00 /opt/McAfee/ens/tp/bin/mfetpd
system_u:system_r:mfe_ens_fwd_t:s0 root  16183  0.1  0.2 746908 17496 ?        Ssl  08:48   0:00 /opt/McAfee/ens/fw/bin/mfefwd

Note

Your installation will fail when the default SELinux is not supported by rpm.

Failed dependencies:
	selinux-policy >= 3.14.1-61 is needed by McAfeeENS-selinux-10.7.0-10.el8.noarch
This is corrected by verifying the rpm is supported by linux os.