SELinux Administration Fundamentals

Security securityhardeninglinuxselinuxmacaccess-controlpolicy

Three-day hands-on SELinux course: mandatory access control architecture, SELinux modes, security contexts (users, roles, types, levels), policy concepts, file and process labelling, user mapping, role transitions, process domains, network labelling, boolean management, audit log analysis, writing and compiling custom type-enforcement policies, and practical troubleshooting with audit2allow.

Upcoming sessions

No upcoming sessions are scheduled yet.

FOUNDATIONSWhy SELinux Matters3FOUNDATIONSIntroduction toMandatory Access Control2CONTEXTSSecurity Contexts3ADMINISTRATIONSELinux Modes & PolicyTypes3FILE CONTEXTSFile Contexts4TROUBLESHOOTINGAudit Logging & BasicTroubleshooting3USER MANAGEMENTSELinux User Management4USER MANAGEMENTRoles & Role Transitions3FILE CONTEXTSFile Context Management(Advanced)2ADMINISTRATIONBoolean Management3TROUBLESHOOTINGAudit Log Analysis2PROCESS CONTEXTSProcess Domains4NETWORKNetwork Context & PortLabelling3POLICY DEVELOPMENTWriting Custom SELinuxPolicies4TROUBLESHOOTINGEnd-to-EndTroubleshooting Lab3LECTURELECTURELECTURELECTURELECTURELECTURELECTURELECTURELECTURELECTURELECTURELECTUREDAC Limitations & RealVulnerability ScenariosBrief History of SELinux &Security Model ComparisonQ&AMAC Principles & SELinuxArchitectureSELinux Core Components:Users, Roles, TypesThe Four-Part Context:user:role:type:levelViewing Contexts: ls -Z,ps -Z, id -ZLab: Inspect Contexts on aRunning SystemEnforcing, Permissive &Disabled ModesPolicy Types: targeted,mls, minimumLab: Toggle Modes andObserve DenialsFile Context Inheritance &Default Contextschcon & restoreconPersistent Rules withsemanage fcontextLab: Relabel a Web RootDirectoryAVC Denial Messages &Audit Log Structureausearch, audit2why &sealertLab: Diagnose and Fix aDenialSELinux Users vs LinuxUsersLogin Mappings &__default__ EntryConfined Users: user_u,staff_u, sysadm_uLab: Restrict a Linux Uservia SELinux MappingRole Hierarchy & RoleRulesRole Transitions withnewrole & sudoLab: Role-Based AccessScenarioContext Equivalency &semanage fcontext PatternsLab: Label a CustomApplication DirectorySELinux Booleans:getsebool & setseboolCommon Policy Booleans forApache, SSH, NFSLab: Enablehttpd_can_network_connectAdvanced ausearch &audit2allow WorkflowsLab: Systematic AVCAnalysis on a…Process Domain Concepts &Domain TransitionsEntrypoint Types & TypeEnforcement RulesConfined vs UnconfinedProcess DomainsLab: Observe DomainTransitions for a Web…SELinux Port Types &semanage portNetwork Labelling &SECMARKLab: Allow a Service on aNon-Standard PortType Enforcement Syntax &Allow RulesDontaudit, Auditallow &NeverallowCompiling & Loading aModule with…Lab: Write a Custom Policyfor a New ServiceReview: Common SELinuxPitfallsLab: Fix a Broken SELinuxConfigurationQ&A & Wrap-Up
100%

Upcoming sessions

No upcoming sessions are scheduled yet.

Get in touch

Request more information

Leave your details and our team will get back to you with everything you need to know about this course.