SELinux introduction
summary
Introduction to SELinux explains mandatory access control vs traditional UNIX DAC, shows getenforce/setenforce and sestatus to check mode, and demonstrates real fixes using semanage and restorecon plus audit2allow to convert AVC denials into policy. A PHP webshell in a demo tries and fails to read /etc/shadow while enforcing is on, then succeeds after setenforce 0, illustrating labels, types, booleans, file_contexts and targeted vs strict/MCS policies and how relabeling or adding a file context actually resolves most breakages.
AI-written summary · about
chapters (30)
- 0:00Introduction
- 1:53SELinux
- 2:24Access control
- 3:04History
- 3:49Mandatory Access Control
- 5:45Security Modules
- 6:49Security Policies
- 9:32Labels
- 12:32LSDash
- 13:38Audit logs
- 16:40Label
- 16:53Types
- 19:26Policies
- 20:02Macros
- 21:31Troubleshooting
- 23:14Fedora
- 23:47Learn more
- 24:31Demo
- 25:37File
- 25:51Apache
- 27:06PHP Shell
- 27:41proc
- 28:28shadowfile
- 32:01NFS
- 32:23Permissions
- 33:53Bullying table
- 35:19Oracle
- 35:37Firewalls
- 38:34ErSEC
- 41:42HTTP Policies
