# firewall-cmd --zone=public --add-port=7001/udp
# firewall-cmd --runtime-to-permanent
-### SELinux
-
-Ideally, SELinux should be kept in enforcing mode. SELinux may be set to
-enforcing for the OpenAFS client, but unfortunately, for the servers, there are
-still several [issues][1] remaining before the servers can run out the box with
-SELinux in enforcing mode.
-
-For test installations, SELinux can be set into permissive mode, which will
-print warnings instead of blocking:
-
- # setenforce 0
- # sed -i -e 's/SELINUX=enforcing/SELINUX=permissive/' /etc/selinux/config
-
-See [this report][1] for workarounds if you need to run in enforcing mode.
-
-[1]: https://bugzilla.redhat.com/show_bug.cgi?id=1136396
-
## Installing Kerberos
Install the Kerberos server and client packages with the command: