Chapter 5. Using SELinux

Here is an overview of the recipes presented in this chapter:

  • Changing file contexts
  • Configuring SELinux booleans
  • Configuring SELinux port definitions
  • Troubleshooting SELinux
  • Creating SELinux policies
  • Applying SELinux policies

Introduction

SELinux is a Linux kernel module that allows supporting mandatory access control (MAC) security policies. The Red Hat implementation of SELinux combines role-based access control (RBAC) with type enforcement (TE). Optionally, multilevel security (MLS) is also available but isn't widely used as it implements fewer policies than the default Red Hat SELinux policies.

SELinux is enabled by default in RHEL 7 and supported for all software packaged by Red Hat.

The recipes presented in this chapter will ...

Get Red Hat Enterprise Linux Server Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.