Linux Troubleshooting Make Easy.

Linux Learning & Troubleshooting Make Easy.

SELinux

Security-Enhanced Linux (SELinux) is a mandatory access control (MAC) security mechanism implemented in the kernel. 

SELinux Modes:

SELinux has three basic modes of operation, of which Enforcing is set as the installation default mode. There is, however, an additional qualifier of targeted or mls which control how pervasive SELinux rules are applied, with targeted being the less stringent level. 

  • Enforcing: The default mode which will enable and enforce the SELinux security policy on the system, denying access and logging actions
  • Permissive: In Permissive mode, SELinux is enabled but will not enforce the security policy, only warn and log actions. Permissive mode is useful for troubleshooting SELinux issues
  • Disabled: SELinux is turned off




To view the current SELinux status:
#  getenforce
#  sestatus


     SELinux status:                 enabled
     SELinuxfs mount:                /selinux
     Current mode:                   enforcing
     Mode from config file:          enforcing
     Policy version:                 21
     Policy from config file:        targeted

To change the state of SElinux:
#  setenforce Enforcing / Permissive / Disabled

To make changes persistent through a system reboot:
#  vi /etc/selinux/config

     SELINUX=permissive / permissive / disabled     

Note: When switching from Disabled to either Permissive or Enforcing mode, it is highly recommended that the system be rebooted and the filesystem relabeled.

SELinux Access Control:
SELinux has 3 forms of access control:

  • Type Enforcement (TE): Type Enforcement is the primary mechanism of access control used in the targeted policy
  • Role-Based Access Control (RBAC): Based around SELinux users (not necessarily the same as the Linux user), but not     used in the default targeted policy
  • Multi-Level Security (MLS): Not commonly used and often hidden in the default targeted policy.

Change Security Contexts:

#  chcon -v --type=httpd_sys_content_t /html
context of /html changed to user_u:object_r:httpd_sys_content_t

#  chcon -v --type=httpd_sys_content_t /html/index.html
context of /html/index.html changed to user_u:object_r:httpd_sys_content_t

#  ls -Z /html/index.html
-rw-r--r--  root root user_u:object_r:httpd_sys_content_t    /html/index.html

#  ls -Z | grep html
drwxr-xr-x  root root user_u:object_r:httpd_sys_content_t    html

Restore Default Security Contexts:

#  restorecon -v /var/www/html/index.html         ## restore for a single file

#  restorecon -Rv /var/www/html                       ## -R for whole directory




4 comments:

ninest123 Ninest said...

ninest123 11.26
michael kors handbags, burberry factory outlet, longchamp bags, replica watches, louboutin uk, michael kors outlet, uggs outlet, prada handbags, louis vuitton outlet online, cheap oakley sunglasses, ralph lauren outlet, louis vuitton outlet, cheap jordans, louboutin shoes, louis vuitton, gucci handbags, ralph lauren polo, oakley sunglasses, oakley sunglasses, oakley sunglasses, longchamp outlet, ray ban sunglasses, longchamp outlet, nike outlet, ray ban sunglasses, christian louboutin, uggs outlet, prada outlet, nike free, michael kors outlet online, nike air max, ray ban sunglasses, uggs on sale, christian louboutin, nike air max, replica watches, michael kors outlet online, burberry outlet, uggs on sale, tiffany jewelry, louis vuitton handbags, oakley sunglasses, tiffany jewelry, uggs on sale, tory burch outlet, michael kors, louis vuitton outlet, michael kors outlet online

ninest123 Ninest said...

longchamp pas cher, timberland pas cher, polo ralph lauren uk, nike trainers uk, true religion outlet, hermes pas cher, nike roshe run pas cher, nike tn pas cher, michael kors, nike air max pas cher, michael kors uk, abercrombie and fitch UK, north face uk, north face pas cher, mulberry uk, vanessa bruno pas cher, michael kors, lunette ray ban pas cher, sac guess pas cher, longchamp soldes, nike air max uk, coach purses, louboutin pas cher, coach outlet store online, abercrombie and fitch, ralph lauren pas cher, true religion outlet, vans pas cher, hollister uk, nike free pas cher, true religion outlet, nike free, nike air max uk, ray ban uk, jordan pas cher, polo lacoste pas cher, nike blazer pas cher, hogan sito ufficiale, true religion jeans, lunette oakley pas cher, lululemon outlet, nike roshe uk, nike air max, new balance, converse, burberry pas cher, coach outlet, michael kors outlet online, nike air force

ninest123 Ninest said...

iphone 6s cases, mac cosmetics, north face outlet, oakley, vans scarpe, nike air max, hermes handbags, softball bats, ipad cases, s6 cases, louboutin, nike roshe run, gucci, vans outlet, abercrombie and fitch, celine handbags, mont blanc, valentino shoes, iphone 5s cases, ray ban, giuseppe zanotti, lululemon outlet, beats by dre, nfl jerseys, mcm handbags, bottega veneta, nike air max, iphone 6 cases, chi flat iron, insanity workout, iphone cases, converse, asics running shoes, instyler ionic styler, reebok outlet, babyliss pro, hollister clothing, north face outlet, polo ralph lauren, soccer shoes, wedding dresses, salvatore ferragamo, iphone 6 plus cases, new balance shoes, herve leger, iphone 6s plus cases, p90x workout, ghd hair, hollister, timberland boots, jimmy choo outlet, soccer jerseys

ninest123 Ninest said...

louis vuitton, pandora jewelry, moncler, pandora uk, canada goose, canada goose pas cher, barbour jackets uk, moncler, canada goose outlet, hollister, louis vuitton, moncler jackets, replica watches, toms shoes, uggs outlet, moncler, canada goose outlet, ugg pas cher, canada goose uk, lancel, ugg uk, juicy couture outlet, bottes ugg pas cher, converse shoes outlet, thomas sabo uk, karen millen uk, wedding dresses uk, sac louis vuitton, pandora charms, supra shoes, pandora jewelry, barbour, moncler pas cher, coach outlet, moncler outlet, marc jacobs, louis vuitton uk, ugg,uggs,uggs canada, swarovski jewelry, canada goose jackets, canada goose, sac louis vuitton, doke & gabbana, moncler, ugg,ugg australia,ugg italia, montre pas cher, canada goose jackets, swarovski uk, juicy couture outlet, links of london uk, moncler uk
ninest123 11.26