Lab
A Cloud Guru

Managing SELinux on RHEL 8

Security Enhanced Linux (SELinux), is an additional layer of system security, that enhances the other security mechanisms in RHEL 8. In this hands-on lab, we will examine SELinux at a high level, will set and check enforcing and permissive modes for SELinux, list and identify SELinux file and process context, restore default file contexts, use boolean settings to modify system SELinux settings, and diagnose and address routine SELinux policy violations on RHEL 8. *This course is not approved or sponsored by Red Hat.*

Try for free Contact sales

Path Info

Level

Intermediate

Duration

30m

Published

Dec 04, 2020

Challenge

Diagnose a Reported Apache Server Issue
1. Discover an Apache Server access issue.
2. Attempt to start Apache and view status.
3. Query the system journal for errors and issues.
4. Test if the issue is SELinux-related.
Challenge

Troubleshoot Possible SELinux Errors Affecting Apache
1. Re-enable SELinux and check the status.
2. Investigate audit and other logs for errors.
3. Discover the issue is related to the non-standard port.
Challenge

Create and Apply a Local Policy Module to Fix the Apache Issue
1. Use ausearch and audit2allow to generate a local policy module.
2. Investigate the generated policy module files.
3. Apply the policy module.
4. Test apache access.
Challenge

Clean Up any Additional SELinux-related Issues
1. Check the logs again for errors.
2. Find getattr issues for httpd files.
3. Set context for the affected files.
4. Test for any additional errors.

Author

A Cloud Guru

The Cloud Content team comprises subject matter experts hyper focused on services offered by the leading cloud vendors (AWS, GCP, and Azure), as well as cloud-related technologies such as Linux and DevOps. The team is thrilled to share their knowledge to help you build modern tech solutions from the ground up, secure and optimize your environments, and so much more!

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.