Your cart is empty.
Keep shoppingGetting started with SELinux
46 students
Getting started with SELinux
Feel confident with SELinux in Enforcing mode.
Created byPeter van der weerd
Last updated 6/2025
English
English [Auto],
What you'll learn
- How to set SELinux modes (enforcing/permissive or disabled).
- How to setup SELinux in general (packages needed).
- Inspect labeling an manage the configuration of labels (context-types and domains)
- How to inspect the Access Vector Cache (inspect logging)
- Work with booleans (what are they, and what is their purpose).
- How to map Linux users to SELinux users (change an unconfined user to restricted).
- Create a custom policy module to confine an application to its own domain.
Explore related topics
Course content
8 sections • 21 lectures • 1h 10m total length
Requirements
- Students should have a hands-on working experience on the Linux CLI.
- It would be nice if students should have basic knowledge of filesystems, networking, linux permissions and user management.
- This course is not for experienced SELinux administrators because it deals with SELinux from scratch..
- This course covers the Targeted policy type and not MLS.
Description
In this relatively short course we will cover the basic things you will run into once you activate SELinux on your system.
All modules will start with a short introduction, followed by a hands on demonstration of a couple of minutes. The average length of the videos is about 7 minutes.
By the end of this course you will hopefully feel more confident with managing SELinux.
In the Resource section you will find optional exercises as well as the complete text of the sessions.
We will start with what the function of SELinux is with regards to traditional system security and why it is not a replacement of traditional security but an addition to it.
Then we will see how to set it up and which modes SELinux can be in.
The next module will be on Labeling which is a very important feature to determine which process is allowed to access which files.
We will continue with logging and finding out why a particular action is forbidden. We will see how detect and manage that.
Also Booleans are dealt with: what are they and what is their function.
We will also discuss and demonstrate the difference and relation of Linux users vs SELinux users.
And we will finish with creating a custom SELinux policy module.
By the end of this training I hope you will feel a lot more confident when you start working on a system where SELinux is not Disabled but Enforcing.
Who this course is for:
- Linux Admins that have no or very little experience in working with SELinux.
- Linux Admins who have until now disabled SELinux because they think it makes their job difficult.