Join Sean Colins for an in-depth discussion in this video Discretionary vs. mandatory access, part of Linux: Firewalls and SELinux.
- [Narrator] So I mentioned that SELinex…comes by default with Fedora 25,…and also that it's running in enforcing mode…by default as well.…That's kind of funny because…a lot of people don't even realize…that SELinex is installed on their systems.…Their not familiar with it, they don't see it,…they don't see error messages from it,…so they don't even realize they're being protected by it.…And this is largely because, the system basically will allow…whatever happens, as long as it is somewhat expected…by normal convention.…So, if you're putting your webpages…into the standard webpage directory,…or you're putting files into a standard file share directory…or whatever, you know, things that are expected…or anticipated will be allowed because there are rules set…in the policy that anticipate those needs.…
And it's when you start making things do stuff that's wonky…that things really get kind of get blocked,…and you just start needing to know…how to troubleshoot SELinux.…And that's because of this idea of…discretionary access controls,…
- Working with iptables
- Installing Firewalld
- Exploring zones and services
- Allowing the Apache web server
- Allowing FTP and SFTP servers
- Installing SELinux utils
- Setting discretionary or mandatory access
- Installing SELinux man pages
- Working with Booleans
- Changing context labels
- Running sepolicy
- Finding SELinux logs
- Making domains permissive
- Disabling and reenabling SELinux
Skill Level Intermediate
Linux: Multitasking at the Command Linewith Scott Simpson39m 1s Intermediate
1. Firewall Basics on Linux
2. Configuring Firewalld for Local Protection
3. SELinux Fundamentals
4. Working with SELinux
5. SELinux Troubleshooting
Next steps3m 4s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.