documentation_complete: true


title: 'Enable the selinuxuser_execmod SELinux Boolean'

description: |-
    By default, the SELinux boolean <tt>selinuxuser_execmod</tt> is enabled.
    If this setting is disabled, it should be enabled.
    {{{ describe_sebool_enable(sebool="selinuxuser_execmod") }}}

rationale: ""

severity: medium

identifiers:
    cce@rhel8: CCE-80950-9
    cce@rhel9: CCE-84086-8
    cce@rhel10: CCE-86922-2
    cce@sle15: CCE-91423-4
    cce@sle16: CCE-95715-9

references:
    hipaa: 164.308(a)(1)(ii)(D),164.308(a)(3),164.308(a)(4),164.310(b),164.310(c),164.312(a),164.312(e)

{{{ complete_ocil_entry_sebool_enabled(sebool="selinuxuser_execmod") }}}

template:
    name: sebool
    vars:
        seboolid: selinuxuser_execmod
