Secure install with SELinux on CentOS 7

Secure install with SELinux on CentOS 7

Hello,

I am trying to install PMP (Password Manager Pro) on an hardened CentOS 7, with SELinux (hardening based on CIS Benchmark).
This is abnormal for a solution of that price (enterprise edition) that there is no official documentation about this, all I can found is people having problems and suggesting solutions.

For now, I find out that /tmp must be remount with exec permissions in order to install PMP, or there will be errors like "jre/bin/unpack200 : permission denied".

This is the list of all problems I encounter:
  • JRE is installed in version 1.8.0_102 (2016!)
  • Java is started with root and not a low privileged user
  • Postgres is not starting
  • PMP is stopping after 10 seconds, because of postres error
Is there a way to install dependencies manually? Install JRE in its last version, install a postgres server (locally), create a systemd service and run everything with a non-root user?
Or maybe a real technical install documentation exist for linux?

Best Regards.

                  New to ADSelfService Plus?