From the course: Mastering Security-Enhanced Linux (SELinux)
Unlock this course with a free trial
Join today to access over 25,300 courses taught by industry experts.
Understanding policies - Linux Tutorial
From the course: Mastering Security-Enhanced Linux (SELinux)
Understanding policies
- In this video, you'll learn about the SELinux policy. So what is the role of the policy? The SELinux policy contains rules that allow domains to access specific types. If an activity is not allowed in the policy, access will be denied. And as a result, to enable a distribution to work with SELinux, rules need to be added. So the policy is very important. Without a policy, nothing will work. Now, as a quick fix, audits to allow can be used to convert all the nine messages into policy rules, which next are loaded with SE module. You'll learn about it later in the section about troubleshooting. It's a little bit too much to discuss that at this point in the course, but let's further focus on the policy. If you work on Red Hat, Red Hat calls it a very inclusive target policy. And in this policy, a wide range of modules are loaded even for services that are not currently installed. In Red Hat, the philosophy is they want to minimize the chance that it doesn't work because of SELinux, and…