About SELinux
Вставка
- Опубліковано 5 бер 2021
- In this video I am going to have a first look at SELinux and how it works. Security-Enhanced Linux (SELinux) is a Linux kernel security module that provides a mechanism for supporting access control security policies, including mandatory access controls. You will find preinstalled in Fedora, CentOS and RHEL.
** Become a Patreon to support the channel: bit.ly/39tSfgS **
** Follow Me on Twitter: bit.ly/3gKkPeR **
** Donate to the channel by visiting my Website **
My Hardware:
AMD Ryzen 9
32 GB RAM
Sapphire RX 5700 XT
My software:
Distro: Arch Linux
Video editing software: Kdenlive
Check out my Website and connect on Social Media!
Website: eflinux.com
Twitter: / ermanno_ferrari
Gitlab: gitlab.com/eflinux
#LinuxMadeSimple #howtow #selinux - Наука та технологія
straight to the point and well-explained demo... amazing, thank you so much
Great timing, we have a project at work running RHEL, so this is a great refresher as I haven't used RHEL or CentOS regularly in over two years. Great content. Thanks.
Glad I could help :)
One of the most explicit video i ever watch Thank you!
Awesome! This is exactly what I asked for in the comments of a previous video. Bless you Ermanno!
Thanks! Glad it was helpful!
Thanks, nice to have worked examples.. was struggling to find anything that brought the parts I was reading about together before I watched this video. You've probably saved me days of work - Thanks!
I always appreciate the more Linux and admin videos, thanks! Looking forward to the AppArmor video, too!
Glad to hear it!
Great demo, thank you!
Great video, very well explained!
Great work! Thank you!
Thanks, Ermano. Great Tutorial!
Thank you so much!
Great video, thank you
Nice. Thanks.
Great stuff!
thanks! Looking forward to the AppArmor video
subbed, great lesson!
Awesome 👏
Thanks!
Very interesting Video how ever. You are the biggest Teacher in Arch for me in the Internet. DistroTube think so too in the last Video. Can i wish me a Video ? Arch over Netboot next time (;-D
Thanks man :)
the champion
I made a vm of fedora xfce4 gave it some beef to live in for a while i haven't used fedora since 7 so i was fumbling for a minute hahaha nice content about se
Thanks! I was wanting a simple explanation of this. I became aware of SELinux because I saw it on Android when managing the system with root access. Idk why SELinux is on Android from Android 5.x
Looking forward to the apparmor video as I have it on my system but I still don't know how to use it that well but wanted some security layer.
Glad it helped!
Thank you sir
My pleasure!
Easy to understand Selinux
Really nice, but i'm starting developing on python/django and is more complex to configure a folder. Could you make a video for python developer with Selinux ?
@2:31 is the meat of the matter
Such a great video. Please make more videos on SELinux. I tried my hand at Fedora and every time i tried to setup something the instructions were mostly "just set SELinux to permissive". I'd like to know more to take care of things myself without having to disable it. More videos on this subject would be very welcome.
Thanks! Glad you liked it! I will explore more about SELinux in the future. Today I have a video coming out that touches SELinux again :)
Currently, I am testing SELinux on an Ubuntu 22.04.4 virtual machine & when I enable enforcing, mode the network gets turned off. Funny enough, when I enabled permissive mode, the network is restored. Am I configuring it wrong?
I'd really like to see a small guide on setting up zRam or zSwap in an arch system. This seems especially interesting to me since fedora is now doing this out of the box. There is no guide on youtube for arch.
Will look into it :)
The reason it isn't default is choice and it is quite easy to implement selinux or apparmor in archlinux or anyother linux or unix distribution.
Hey Ermano thanks for making the video on request. But I have a question
1. Why doesn't other distros ship it by default if this is so useful especially arch,debian and ubuntu if it can provide extra layer of security ?
2. Is it really that useful for a normal user I can see this is really useful in devs environment since security will be main concern for every company but I think there is no harm in implementing this for extra layer of security in other distros ?
3. Other distros like debian, arch having larger community and ubuntu having a corporate backing isnt this useful if they implement this by default since ubuntu based distros is used by many especially by web devs ?
BTW DistroTube mentioned your channel along with others channel that he watches today on his channel.
Its good to see linux community tied together like this and mentioning others channel so that more people will know about linux and can get content if it is not covered by the other. Thanks Ermano for making this video
I can't really say why other distros don't have SELinux installed. Ubuntu comes with Apparmor (which is another tool for M.A.C) preinstalled, which is also a great tool, although, if I remember correctly, it is disabled by default. Whether you use SELinux or Apparmor , system security is definitely going to benefit from it, but again, as to why this is not standard I really can't say. I've seen DT video this morning and answered him in the comments and I greatly appreciated what he did. As you say, I am all for the Linux community being together :)
@@eflinux Ok .Thanks for mentioning this. Hope other distros incorporate this by default since its good.
Hi ermano. Can you make a video about installing SELinux on Archlinux? Today I tried to install SELinux on Archlinux. Everything was fine. But the polkit service failed. And I could not install it. I would be grateful if you post a video about this. Thanks :)
That is why I didn’t do any video until now. The policy module is still not complete for Arch and it causes problems. I’ll explore this more when things will be a little more stable.
Why SELinux on Fedora and not Archlinux?
So, here I wanted to give an overview of SELinux. To implement that on Arch is fairly complex and some aspects and features are not yet available on Arch, according to the wiki.
@@eflinux Got it. There will be no video on installing SELinux in Archlinux?
I'd love to! But I want to see how it goes. I don't want to put out a video half-baked. I'll keep following the development.
@@user-pi7wn4ji5d use apparmor instead. if you're in hurry have a look at this untill Ermanno makes a tutorial: ua-cam.com/video/KYM-Dzivnjs/v-deo.html