SELinux Enabled | Disabled | Permissive | RHCSA 8 Certification #27 | Tech Arkit | EX200

RHCSA 8 SELinux stands for Security Enhanced Linux which provide extra layer of security to the Linux servers based in applied security context matching mechanism.

SELinux context can be enabled in three levels
#RHCSA #Linux #TechArkit
1. Port Level
2. Service Level
3. File Level

SELinux has three modes to work.
1. Enforcing: which means SeLinux is running with full enforcing mode, simple enabled mode.
2. Permissive: Permissive also says that SeLinux is running but it will not enforce, it will only logs the information.
3. Disabled: disable mode is simply disabled. SeLinux not in use.

Immediately we get an question in mind that why there are three modes, Enable and disable modes are enough right.

Yes, i also got the same question when i was learning SeLinux. There is a reason behind that.

When we want to change the SeLinux mode from Enforcing to disabled we have to edit the configuration file /etc/selinux/config and change the SELINUX=disabled, config file will not be effected until unless server is rebooted.

Same for the changing the disabled mode to Enforcing mode.

but if you want to change Selinux mode from Enforcing to permissive doesn't required an reboot.

Now we understand that why SeLinux is designed to have 3 modes.

Whenever you change the SeLinux mode from disable to enforcing after the reboot it will relabel all the SeLinux policies.

whenever you changed the SeLinux mode from Enforcing to Disabled after the reboot all the SeLinux policies will not go off, policies still exists but will not enforce.

Youtube PlayLists

Follow Us on Social Media

[TechArkit]

SELinux - Security Enhanced Linux RHEL 7

[zymagoras]

When i try to run "chcon index.html" i get "chcon: failed to change context of ‘index.html’ to Invalid argument" error

[asiyasyeda]

Hi Tech-Ark team, httpd cannot be installed on centos, can anybody help me fix this

[bhanukapriyasad]

could you please recommend a good book for learn SELinux into deep

[VijayPatil-wcyy]

what is the difference between apache tomcat and http server??

[dileepkumar]

You have explained only type. Could you please explain user and role as well

[nandini]

Please provide the vedios on complete selinux concepts and also how to write selinux policy in m4 language.I have a doubt are there any language to implement policies other than m4..

[Shubhampatiil]

what to learn after linux any path can u suggest

[asdaqamin]

Its good Demo of SELinux. is there a real use in Production level. I still not find any reason where to use it.

[vamsikrishnakolla]

in real time selinux is in which mode ?
it's in enforcing or permissive or what

[abhijith]

Thanks
Would you please elaborate more about selinux Boolean as well here or upcoming videos
Thanks a lot again