SELinux - Security Enhanced Linux Explained RHEL 7 - RHCSA - TechArkit



SeLinux : Security Enchanced Linux



SeLinux will support



. Port Level Security

. Sevice Level Security

. File Level Security



simply we can say 3 layer secuity.



SeLinux having 3 modes to manage security.



1. Enforcing: which means SeLinux is running with full enforcing mode, simple enabled mode.

2. Permissive: Permissive also says that SeLinux is running but it will not enforce, it will only logs the information.

3. Disabled: disable mode is simply disabled. SeLinux not in use.



Immediatly we get an question in mind that why there are three modes, Enable and disable modes are enough right.



Yes, i also got the same question when i was learning SeLinux. There is a reason behind that.



When we want to change the SeLinux mode from Enforcing to disabled we have to edit the configuration file /etc/selinux/config and change the SELINUX=disabled, config file will not be effected until unless server is rebooted.



Same for the changing the disabled mode to Enforcing mode.



but if you want to change Selinux mode from Enforcing to permissive doesn't required an reboot.



Now we understand that why SeLinux is disgned to have 3 modes.



Whenever you change the SeLinux mode from disable to enforcing after the reboot it will relabel all the SeLinux policies.



whenever you changed the SeLinux mode from Enforcing to Disabled after the reboot all the SeLinux policies will not go off, policies still exists but will not enforce.



Youtube PlayLists

Shell-Scripting: https://goo.gl/a1Hu3s

Linux-Commands: https://goo.gl/QDoL7h

RHCSA Certification: https://goo.gl/X2Ksqn

Putty Software Tricks: https://goo.gl/MB1Do2

Linux OS: https://goo.gl/62p8s9



Follow Us on Social Media

Telegram Group: https://goo.gl/KPvMda

https://arkit.co.in/one-linux-tutorial/

Reddit: http://bit.ly/redditark

https://goo.gl/mcUvef

Mailing List: http://bit.ly/feedburnerark

https://goo.gl/fb/WAU7JG

Facebook: https://fb.com/linuxarkit 

https://goo.gl/2QN4sD

LinkedIn: http://bit.ly/linkedark

https://goo.gl/ZLcikC

Twitter: https://twitter.com/aravikumar48

Google Plus: http://bit.ly/gplusark

https://goo.gl/79zwX9

No comments:

Post a Comment