Thursday, May 27, 2021
Security Enhanced Linux (SELinux) is a set of kernel medications developed by the NSA and later distributed to the public to secure computer systems. Most people would disable it on install because it's a pain to work with. But, if configured correctly it could harden your system considerably.
First let's install all the packages that we need for SELinux with the following yum command
yum install policycoreutils policycoreutils-python selinux-policy selinux-policy-targeted libselinux-utils setroubleshoot-server setools setools-console mcstrans
Select "y" when asked for a confirmation.
Now we want to see if SELinux is enabled by getting the status with this command
getenforce | sestatus
As we can see SELinux is enabled on our system. Currently it is enabled at the highest level which is enforcing.
There are security mode in SELinux, they are the following:
First let's install all the packages that we need for SELinux with the following yum command
yum install policycoreutils policycoreutils-python selinux-policy selinux-policy-targeted libselinux-utils setroubleshoot-server setools setools-console mcstrans
Select "y" when asked for a confirmation.
Now we want to see if SELinux is enabled by getting the status with this command
getenforce | sestatus
As we can see SELinux is enabled on our system. Currently it is enabled at the highest level which is enforcing.
There are security mode in SELinux, they are the following:
- Enforcing - In this mode all access from users or processes that are not authorized are denied, and the even will be logged.
- Permissive - In this mode as the name implies is permission meaning non of the access is denied. This will be the mode we start out with because we want to test and SELinux using this mode.
- Disabled - Means SELinux is not enabled.
The first we want to do is set the security mode to "Permissive" so that we can setup and configure SELinux.
Open the file /etc/selinux/config with your favorite editor and change the line SELinux=enforcing to SELinux=permissive so that all files can be labeled
To get into Permissive mode you have to reboot the system type in the command reboot now
Now let's check to see that the Permissive mode was successful with the command grep 'SELinux' /var/log/messages
The next step is to change /etc/selinux/config file back to SELINUX back to enforcing, then reboot the system again.
Subscribe to:
Post Comments (Atom)
Thanks for posting such a great blog
ReplyDeleteVermicompost Manufacturers | Vermicompost in chennai
To be honest your article is informative and very helpful. Hp Laptop
ReplyDeleteHp Laptop online
Get yourself this fantastic stainless-steel rocker garlic press. Comfortable grip and rocking motion allows you to crush the garlic in record time. Easy to store and
ReplyDeleteclean.
garlic crusher
cell phone holder for car
I think this is among the most significant info for me. And i’m glad reading your article.
ReplyDeleteskills you can learn online
Nice post. It is really interesting. Thanks for sharing the post!
ReplyDeleteOppo A11k 32GB 2GB Smartphone v2kart.xyz
Realme 3 Pro (Lightning Purple, 128 GB) (6 GB RAM) Refurbished v2kart.xyz
A very inspiring blog your article is so convincing.
ReplyDeleteBest aeronautical engineering colleges in coimbatore
Best colleges for aeronautical engineering in coimbatore
Top most engineering colleges in coimbatore
ReplyDeleteMyMovers is a team of technically-skilled and experienced Packers and movers in Bangalore who deliver their services across India. They provide various services to their customers to remove the word Shifting bizarre from the dictionary.
movers and packers in Bangalore
Packers and movers in Bangalore
Save more on your move with Cloud packers and Movers Delhi
ReplyDeleteHow Can You Hire Flexible Packers and Movers as per your need