RHEL7 SELinux controlling admin access

SELinux has been part of Red Hat Enterprise Linux since version 4 and we are now in the beta release of version 7; it is fair to say that it is here to stay. Developed and maintained by the NSA (US National Security Agency) this is a crucial tool for administrators in ensuring security is maintained effectively of their devices. It is a big subject area and there is a lot to take on board and all too often the easy choice is to disable SELinux or set it to Permissive mode where security breaches will be logged but not prevented. In this tutorial we look at migrating from unconfined users to users that are managed by SELinux policies and show how this can be used to ensure delegated administrators use sudo rather than su to complete tasks.

[theurbanpenguin]

SELinux has been part of Red Hat Enterprise Linux since version 4 and we are now in the beta release of version 7; it is fair to say that it is here to stay. Developed and maintained by the NSA (US National Security Agency) this is a crucial tool for administrators in ensuring security is maintained effectively of their devices. It is a big subject area and there is a lot to take on board and all too often the easy choice is to disable SELinux or set it to Permissive mode where security breaches will be logged but not prevented. In this tutorial we look at migrating from unconfined users to users that are managed by SELinux policies and show how this can be used to ensure delegated administrators use sudo rather than su to complete tasks.