Join Sean Colins for an in-depth discussion in this video Understanding contexts, part of Linux: Firewalls and SELinux.
- [Instructor] To understand contexts in SELinux,…you need to understand the concepts of labeling…and the labeling of type enforcement.…Because what SELinux is really doing mostly,…whenever it's managing things at the file system…and also over network ports, is it's looking at…the types that are labeled on processes and on files…and on folders, and it's interpreting those…and it's using the policy to determine whether or not…operations are allowed based on what's prewritten…into that policy.…
So let's look at what that kind of looks like.…Let's just cd into usr/sbin, okay,…and we're going to ls - lZ on http and d.…And there's the httpd process and it has…all of our POSIX permissions that we're used to seeing…over here, the rwxr-xr-x and the root and root POSIX…user and group, and that's all normal and standard…and what we're used to seeing outside of an SELinux context.…But here we have the labels of the context, right?…System u object r http exec t.…
Now those u, r and t endings there to those terms…are really important because those are the labels…
- Working with iptables
- Installing Firewalld
- Exploring zones and services
- Allowing the Apache web server
- Allowing FTP and SFTP servers
- Installing SELinux utils
- Setting discretionary or mandatory access
- Installing SELinux man pages
- Working with Booleans
- Changing context labels
- Running sepolicy
- Finding SELinux logs
- Making domains permissive
- Disabling and reenabling SELinux
Skill Level Intermediate
Linux: Multitasking at the Command Linewith Scott Simpson39m 1s Intermediate
1. Firewall Basics on Linux
2. Configuring Firewalld for Local Protection
3. SELinux Fundamentals
4. Working with SELinux
5. SELinux Troubleshooting
Next steps3m 4s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.