0 views
Read
#0
Learn SELinux - Pre-Requisite Skills & Environment Setup
Before diving deeper into SELinux, there are several basic Linux skills you must master first: CLI and shell, systemd service management, file permissions, and the dnf package manager. This episode also guides you through setting up a safe lab environment, installing SELinux userspace tools, and verifying that SELinux is active on your system.
August 3, 2026
00
Read
#1
Learn SELinux - History, Background & Why We Need SELinux
Tracing why the world needs SELinux: the limitations of DAC that only restricts based on user and group, the birth of the SELinux project by NSA together with Red Hat, its integration into the Linux 2.6 kernel in 2003, and the modern userspace 3.11 ecosystem used today.
August 3, 2026
00
Read
#2
Learn SELinux - Core Concepts & Main Architecture
Unpacking the foundation of the SELinux architecture: Type Enforcement that restricts domains against types, the user:role:type:sensitivity security context format, the role of the Access Vector Cache (AVC), and the kernel LSM layer and userspace tools that work together to enforce the policy.
August 3, 2026
00
Read
#3
Learn SELinux - Modes, Status & Basic Troubleshooting
Dissecting the three SELinux modes — enforcing, permissive, and disabled — along with how to switch between modes safely via runtime, kernel parameters, and /etc/selinux/config configuration. Concluded with the practice of reading AVC logs to diagnose denials using ausearch.
August 3, 2026
00
Read
#4
Learn SELinux - Labeling & Filesystem Context
Diving into the SELinux labeling system: reading file contexts with ls -Z and stat -Z, changing labels temporarily with chcon, mapping permanent labels with semanage fcontext, restoring default labels with restorecon, and relabeling the filesystem with fixfiles and setfiles.
August 3, 2026
00
Read
#5
Learn SELinux - Domains, Types & Policy Modules
Reading and understanding the policy from the inside: the structure of Type Enforcement rules such as allow and neverallow, attributes and roles, reading the policy with sesearch and seinfo, and managing policy modules with semodule in the .pp and modern CIL formats.
August 3, 2026
00
Read
#6
Learn SELinux - Booleans & Tunables
Getting to know SELinux booleans and tunables as policy behavior switches that can be changed without rewriting modules: how to read status with getsebool, changing temporarily and persistently with setsebool -P, common booleans for web, samba, and FTP, and how to audit changes that have been made.
August 3, 2026
00
Read
#7
Learn SELinux - audit2allow & Local Policy Generation
Mastering the SELinux denial debugging workflow: reading deny logs with ausearch, translating them into policy rules with audit2allow, creating and installing local policy modules, plus best practices so you don't get trapped into generating policies blindly.
August 3, 2026
00
Read
#8
Learn SELinux - Users, Roles & MLS/MCS
Understanding the identity layer in SELinux: the difference between Linux users and SELinux users, login mapping with semanage login, the concept of roles to restrict administrator domain transitions, and the MLS and MCS mechanisms for hierarchical data classification and workload isolation.
August 3, 2026
00
Read
#9
Learn SELinux - Web Server & Application Services
Applying SELinux to web servers and application services: the correct file contexts for content, logs, and scripts, booleans for network and database connections, port labeling with semanage port, and multi-instance patterns for MySQL and PostgreSQL.
August 3, 2026
00