SELinux - Security Enhanced Linux Explained RHEL 7 - RHCSA - TechArkit
SeLinux : Security Enchanced Linux
SeLinux will support
. Port Level Security
. Sevice Level Security
. File Level Security
simply we can say 3 layer secuity.
SeLinux having 3 modes to manage security.
1. Enforcing: which means SeLinux is running with full enforcing mode, simple enabled mode.
2. Permissive: Permissive also says that SeLinux is running but it will not enforce, it will only logs the information.
3. Disabled: disable mode is simply disabled. SeLinux not in use.
Immediatly we get an question in mind that why there are three modes, Enable and disable modes are enough right.
Yes, i also got the same question when i was learning SeLinux. There is a reason behind that.
When we want to change the SeLinux mode from Enforcing to disabled we have to edit the configuration file /etc/selinux/config and change the SELINUX=disabled, config file will not be effected until unless server is rebooted.
Same for the changing the disabled mode to Enforcing mode.
but if you want to change Selinux mode from Enforcing to permissive doesn't required an reboot.
Now we understand that why SeLinux is disgned to have 3 modes.
Whenever you change the SeLinux mode from disable to enforcing after the reboot it will relabel all the SeLinux policies.
whenever you changed the SeLinux mode from Enforcing to Disabled after the reboot all the SeLinux policies will not go off, policies still exists but will not enforce.
Youtube PlayLists
Shell-Scripting: https://goo.gl/a1Hu3s
Linux-Commands: https://goo.gl/QDoL7h
RHCSA Certification: https://goo.gl/X2Ksqn
Putty Software Tricks: https://goo.gl/MB1Do2
Linux OS: https://goo.gl/62p8s9
Follow Us on Social Media
Telegram Group: https://goo.gl/KPvMda
https://arkit.co.in/one-linux-tutorial/
Reddit: http://bit.ly/redditark
https://goo.gl/mcUvef
Mailing List: http://bit.ly/feedburnerark
https://goo.gl/fb/WAU7JG
Facebook: https://fb.com/linuxarkit
https://goo.gl/2QN4sD
LinkedIn: http://bit.ly/linkedark
https://goo.gl/ZLcikC
Twitter: https://twitter.com/aravikumar48
Google Plus: http://bit.ly/gplusark
https://goo.gl/79zwX9
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment