Product SiteDocumentation Site

Chapter 14. DHCP

14.1. DHCP and SELinux
14.2. Types
DHCPD is the daemon used in Red Hat Enterprise Linux to dynamically deliver and configure Layer 3 TCP/IP details for clients.
The dhcp package provides the DHCP server, dhcpd. Run rpm -q dhcp to see if the dhcp package is installed. If it is not installed, run the following command as the root user to install it:
yum install dhcp

14.1. DHCP and SELinux

When DHCPD is enabled, it runs confined by default. Confined processes run in their own domains, and are separated from other confined processes. If a confined process is compromised by an attacker, depending on SELinux policy configuration, an attacker's access to resources and the possible damage they can do is limited. The following example demonstrates the DHCPD and related processes running in their own domain. This example assumes the dhcp package is installed and that the DHCPD service has been started:
  1. Run getenforce to confirm SELinux is running in enforcing mode:
    $ getenforce
    Enforcing
    
    The getenforce command returns Enforcing when SELinux is running in enforcing mode.
  2. Run service dhcpd start as the root user to start DHCPD:
    service dhcpd start
    Starting dhcpd:                               [  OK  ]
    
  3. Run ps -eZ | grep dhcpd to view the dhcpd processes:
    ps -eZ | grep dhcpd
    unconfined_u:system_r:dhcpd_t:s0 5483 ?        00:00:00 dhcpd
    
    The SELinux context associated with the dhcpd process is unconfined_u:system_r:dhcpd_t:s0.