mirror of
https://github.com/The-Art-of-Hacking/h4cker
synced 2024-11-10 05:34:12 +00:00
Create selinux_UBUNTU_lab.md
This commit is contained in:
parent
bf6b2dcbd4
commit
08b0b5ebb3
1 changed files with 52 additions and 0 deletions
52
linux-hardening/selinux_UBUNTU_lab.md
Normal file
52
linux-hardening/selinux_UBUNTU_lab.md
Normal file
|
@ -0,0 +1,52 @@
|
|||
# SELinux in Ubuntu Lab
|
||||
|
||||
The following can be completed with Ubuntu 22.x or later.
|
||||
|
||||
## Installing and Enabling SELinux
|
||||
The first step is to install SELinux. Start by opening a command line terminal and installing the necessary packages with the apt commands below.
|
||||
```
|
||||
$sudo apt update
|
||||
$ sudo apt install policycoreutils selinux-utils selinux-basics
|
||||
```
|
||||
### Activate SELinux
|
||||
Execute the following command with root permissions to enable SELinux on the system.
|
||||
```
|
||||
$ sudo selinux-activate
|
||||
```
|
||||
|
||||
## Enforcing Mode
|
||||
Set SELinux to enforcing mode:
|
||||
```
|
||||
$ sudo selinux-config-enforcing
|
||||
```
|
||||
|
||||
Reboot your system. The relabelling will be triggered after you reboot your system. When finished the system will reboot one more time automatically.
|
||||
```
|
||||
$ reboot
|
||||
|
||||
```
|
||||
Check SELinux status with the following command to ensure that it is in enforcing mode.
|
||||
$ sestatus
|
||||
|
||||
|
||||
## Disabling SELinux
|
||||
To disable SELinux open up the `/etc/selinux/config` configuration file and change the following line:
|
||||
|
||||
FROM:
|
||||
```
|
||||
SELINUX=enforcing
|
||||
```
|
||||
TO:
|
||||
```
|
||||
SELINUX=disabled
|
||||
```
|
||||
Reboot your system for the changes to take effect.
|
||||
|
||||
Alternatively you can temporarily put SELinux into permissive mode with the following command.
|
||||
```
|
||||
$ sudo setenforce 0
|
||||
```
|
||||
Note this change will not be persistent (i.e., survive a reboot). It will go back to enforcing later. To enable SELinux again just execute:
|
||||
```
|
||||
$ sudo setenforce 1
|
||||
```
|
Loading…
Reference in a new issue