Join Sean Colins for an in-depth discussion in this video Making domains permissive, part of Linux: Firewalls and SELinux.
- As discussed over and over again in this course…when SELinux is running in permissive mode,…it will not deny access.…But denials are logged for actions…that would have been denied…if running in enforcing mode.…This is so useful.…Rather than just making the whole system permissive,…however, to troubleshoot a problem,…you may find it beneficial…to just put a single process into permissive mode,…but making its domain permissive…is how you actually do that,…and we can even to it temporarily.…Though writing new domain policy modules…is beyond the scope of this course,…if you were to do so with permissive domains,…only the domain in the new policy module…could be marked as permissive,…thus only exposing the new thing…and not the entire system.…
We use semanage to make the domain permissive…and all we really need to know…is how to type the name of the domain.…You use the permissive -a command…followed by the name of the domain…you want to make permissive,…- a just stands for add.…Let's make the httpd_t domain…permissive together now.…
- Working with iptables
- Installing Firewalld
- Exploring zones and services
- Allowing the Apache web server
- Allowing FTP and SFTP servers
- Installing SELinux utils
- Setting discretionary or mandatory access
- Installing SELinux man pages
- Working with Booleans
- Changing context labels
- Running sepolicy
- Finding SELinux logs
- Making domains permissive
- Disabling and reenabling SELinux
Skill Level Intermediate
Linux: Multitasking at the Command Linewith Scott Simpson39m 1s Intermediate
1. Firewall Basics on Linux
2. Configuring Firewalld for Local Protection
3. SELinux Fundamentals
4. Working with SELinux
5. SELinux Troubleshooting
Next steps3m 4s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.