Manage SELinux Part 1 - RHCSA v9 Review

Поділитися
Вставка
  • Опубліковано 6 лис 2024

КОМЕНТАРІ • 13

  • @injestnick3401
    @injestnick3401 4 місяці тому

    cool dude, love your content ! 😎

  • @thespencerowen
    @thespencerowen 9 місяців тому

    Great video. Thanks for sharing

  • @jonnytheponny5753
    @jonnytheponny5753 11 місяців тому

    thanks for the helpful video!

  • @voiceoftreason1760
    @voiceoftreason1760 Рік тому

    I find it clarifying to see the selinux rules for files in the file /etc/selinux/targeted/contexts/files/file_contexts.local. It's not really needed to manage selinux but its good to know about. You can also see these rules with semanage fcontext -l

  • @Albo_AK
    @Albo_AK 4 місяці тому

    3:17 Setting enforcing/permissive modes

  • @chrisy.703
    @chrisy.703 Рік тому

    Hi, I think policycoreutils-python-utils package is installed as default in RHEL9..... do we need to install it manually in the exam? The other question is update the /proc/cmdline with selinux=0 same as update in /etc/selinux/config?

    • @beanologi
      @beanologi  Рік тому +1

      On a “minimal” RHEL installation, the policycoreutils-python-utils package is not included. Other installation profiles like “workstation” are more likely to have it. It’s useful to know the name of the package just in case you need it.

    • @beanologi
      @beanologi  Рік тому +2

      For your second question, there is a slight difference between the config file and boot parameter. The config file gets read early in boot and it will try to disable selinux at the later time it parses the file which has the potential to cause stability problems because of the delayed disablement. The boot parameter selinux=0 is more effective because it disables selinux immediately when the kernel is loading. I showed both in the video to help bring awareness to both methods of how selinux can be disabled.

  • @tazaccking7467
    @tazaccking7467 Рік тому

    is it possible to setup rhcsa lab for exam practice in our pc

    • @beanologi
      @beanologi  Рік тому

      Yes, definitely! Some of the first videos on this channel were about setting up a practice lab. I will leave a link to the playlist here and I recommend you give it a try.
      ua-cam.com/play/PLTY9BjMMGESEGa9e7Ootc57eSKBJ2C0-v.html
      The process I showed in those videos is a manual one but there are also automatically-generated lab projects you can find on GitHub as well.
      For example, github.com/rdbreak/rhcsa8env is very nice and a popular choice. It is currently designed for RHEL8 so keep that in mind.
      I might return to the video topic of creating an improved lab in the future when I finalize the automated versions I've been working on.
      github.com/aakyfun/lab-libvirt (still in-development)
      I hope this helps. Take care!

    • @tazaccking7467
      @tazaccking7467 Рік тому

      @@beanologi thank you very much

    • @tazaccking7467
      @tazaccking7467 Рік тому

      @@beanologi i was trying to connect my windows machine to ansible in linux using winrm .I was unsuccessful so can you help me by doing a video on it please

    • @beanologi
      @beanologi  Рік тому +1

      @@tazaccking7467 Sure, I will add it to my list of planned videos. Thanks for sharing your idea.