Manage SELinux Part 1 - RHCSA v9 Review

Подписаться 1,8 тыс.

Просмотров 7 тыс.

50% 1

RHCSA on RHEL 9 Series:
Enable SELinux in enforcing mode, list file and process context, and restore default file contexts.
#selinux #rhcsa #linux
Clarifications:
I produce “educational-style” videos to help me practice public speaking and tricky concepts. If these videos are helpful to you, that is fantastic, but please be aware of the original intent.
My videos will NOT give you an unfair advantage on any exam. The information in my videos is sourced from publicly available documentation and my own experience OUTSIDE of any exams I have taken. That information is also provided "as is" and is not guaranteed to be free from error.
Your viewership is greatly appreciated. Thank you!

Опубликовано:

21 окт 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 13

@voiceoftreason1760 Год назад

I find it clarifying to see the selinux rules for files in the file /etc/selinux/targeted/contexts/files/file_contexts.local. It's not really needed to manage selinux but its good to know about. You can also see these rules with semanage fcontext -l

@injestnick3401 3 месяца назад

cool dude, love your content ! 😎

@thespencerowen 8 месяцев назад

Great video. Thanks for sharing

@jonnytheponny5753 11 месяцев назад

thanks for the helpful video!

@chrisy.703 Год назад

Hi, I think policycoreutils-python-utils package is installed as default in RHEL9..... do we need to install it manually in the exam? The other question is update the /proc/cmdline with selinux=0 same as update in /etc/selinux/config?

@beanologi Год назад

On a “minimal” RHEL installation, the policycoreutils-python-utils package is not included. Other installation profiles like “workstation” are more likely to have it. It’s useful to know the name of the package just in case you need it.

@beanologi Год назад

For your second question, there is a slight difference between the config file and boot parameter. The config file gets read early in boot and it will try to disable selinux at the later time it parses the file which has the potential to cause stability problems because of the delayed disablement. The boot parameter selinux=0 is more effective because it disables selinux immediately when the kernel is loading. I showed both in the video to help bring awareness to both methods of how selinux can be disabled.

@Albo_AK 4 месяца назад

3:17 Setting enforcing/permissive modes

@tazaccking7467 Год назад

is it possible to setup rhcsa lab for exam practice in our pc

@beanologi Год назад

Yes, definitely! Some of the first videos on this channel were about setting up a practice lab. I will leave a link to the playlist here and I recommend you give it a try. ru-vid.com/group/PLTY9BjMMGESEGa9e7Ootc57eSKBJ2C0-v The process I showed in those videos is a manual one but there are also automatically-generated lab projects you can find on GitHub as well. For example, github.com/rdbreak/rhcsa8env is very nice and a popular choice. It is currently designed for RHEL8 so keep that in mind. I might return to the video topic of creating an improved lab in the future when I finalize the automated versions I've been working on. github.com/aakyfun/lab-libvirt (still in-development) I hope this helps. Take care!

@tazaccking7467 Год назад

@@beanologi thank you very much

@tazaccking7467 Год назад

@@beanologi i was trying to connect my windows machine to ansible in linux using winrm .I was unsuccessful so can you help me by doing a video on it please

@beanologi Год назад

@@tazaccking7467 Sure, I will add it to my list of planned videos. Thanks for sharing your idea.