Join Sean Colins for an in-depth discussion in this video Disabling and reenabling SELinux, part of Linux: Firewalls and SELinux.
- [Instructor] Disabling and re-enabling SELinux…is here at the very end of the course…because it is really something you don't want to do…unless you don't need your server for a little while.…It takes time, and while it is doing its thing,…you don't want to be using the server,…and it will require a couple of restarts after,…just to be sure that everything is working appropriately.…So, let's go through this.…We're going to do this now,…and you're going to follow along with me.…So, when SELinux is disabled,…SELinux policy is not loaded at all.…
It's not enforced, and messages are not logged.…When you re-enable SELinux…after a long period of it being off,…you start it back up in permissive mode,…not enforcing mode, permissive mode,…so it doesn't just start misbehaving…based on all the extended attributes it cannot find.…So the first thing we're going to do…is we're going to configure SELinux as disabled,…and we're going to do that in the ETC SELinux config file.…Okay, so, let's just do that.…We're going to sudo dash S first…
- Working with iptables
- Installing Firewalld
- Exploring zones and services
- Allowing the Apache web server
- Allowing FTP and SFTP servers
- Installing SELinux utils
- Setting discretionary or mandatory access
- Installing SELinux man pages
- Working with Booleans
- Changing context labels
- Running sepolicy
- Finding SELinux logs
- Making domains permissive
- Disabling and reenabling SELinux
Skill Level Intermediate
Linux: Multitasking at the Command Linewith Scott Simpson39m 1s Intermediate
1. Firewall Basics on Linux
2. Configuring Firewalld for Local Protection
3. SELinux Fundamentals
4. Working with SELinux
5. SELinux Troubleshooting
Next steps3m 4s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.