From the course: Linux: Firewalls and SELinux

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Discretionary vs. mandatory access

Discretionary vs. mandatory access - Linux Tutorial

From the course: Linux: Firewalls and SELinux

Start my 1-month free trial

Discretionary vs. mandatory access

- [Narrator] So I mentioned that SELinex comes by default with Fedora 25, and also that it's running in enforcing mode by default as well. That's kind of funny because a lot of people don't even realize that SELinex is installed on their systems. Their not familiar with it, they don't see it, they don't see error messages from it, so they don't even realize they're being protected by it. And this is largely because, the system basically will allow whatever happens, as long as it is somewhat expected by normal convention. So, if you're putting your webpages into the standard webpage directory, or you're putting files into a standard file share directory or whatever, you know, things that are expected or anticipated will be allowed because there are rules set in the policy that anticipate those needs. And it's when you start making things do stuff that's wonky that things really get kind of get blocked, and you just start needing to know how to troubleshoot SELinux. And that's because…

Contents