Mirrors/h4cker
2
0
Fork 0
mirror of https://github.com/The-Art-of-Hacking/h4cker synced 2024-11-25 04:10:17 +00:00
Code Issues Projects Releases Packages Wiki Activity

Update selinux_lab.md

Browse source
This commit is contained in:
Omar Santos 2023-01-08 15:22:24 -05:00 committed by GitHub
parent 4a3e0e05ae
commit 507e6f56c5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
linux-hardening/selinux_lab.md
View file

@ -16,9 +16,7 @@ SELinux defaults to denying anything that is not explicitly allowed. SELinux has
2. Update your system: 2. Update your system:
``` ```
sudo yum update sudo yum update
{{< note respectIndent=false >}}
``` ```
@ -33,10 +31,9 @@ In this section, you will install various SELinux packages that will help you wh
sudo rpm -aq | grep selinux sudo rpm -aq | grep selinux
``` ```
A newly deployed CentOS 8 Linode should have the following packages installed: A newly deployed CentOS system should have the following packages installed:
``` ```
output
libselinux-2.5-14.1.el7.x86_64 libselinux-2.5-14.1.el7.x86_64
selinux-policy-3.13.1-252.el7_7.6.noarch selinux-policy-3.13.1-252.el7_7.6.noarch
selinux-policy-targeted-3.13.1-252.el7_7.6.noarch selinux-policy-targeted-3.13.1-252.el7_7.6.noarch
@ -59,7 +56,7 @@ Optionally, install `setroubleshoot-server` and `mctrans`. The `setroubleshoot-s
### SELinux States ### SELinux States
When SELinux is installed on your system, it can be either *enabled* or *disabled*. By default, the CentOS 8 image provided by Linode has SELinux in an enabled state. When SELinux is installed on your system, it can be either *enabled* or *disabled*.
- To disable SELinux, update your SELinux configuration file using the text editor of your choice. Set the `SELINUX` directive to `disabled` as shown in the example. - To disable SELinux, update your SELinux configuration file using the text editor of your choice. Set the `SELINUX` directive to `disabled` as shown in the example.
@ -101,7 +98,7 @@ SELinux status: disabled
When SELinux is enabled, it can run in either *enforcing* or *permissive* modes. When SELinux is enabled, it can run in either *enforcing* or *permissive* modes.
If SELinux is currently disabled, update your SELinux configuration file with the `SELINUX` directive set to `enabled`, then reboot your system, and SSH back into your Linode. These steps are outlined in the [SELinux States](#selinux-states) section of the guide. If SELinux is currently disabled, update your SELinux configuration file with the `SELINUX` directive set to `enabled`, then reboot your system, and SSH back into your system. These steps are outlined in the [SELinux States](#selinux-states) section of the guide.
- In enforcing mode, SELinux enforces its policies on your system and denies access based on those policies. Use the following command to view SELinux policy modules currently loaded into memory: - In enforcing mode, SELinux enforces its policies on your system and denies access based on those policies. Use the following command to view SELinux policy modules currently loaded into memory: