From the course: Linux Foundation Certified System Administrator (LFCS) Cert Prep

Unlock this course with a free trial

Join today to access over 24,400 courses taught by industry experts.

Create and enforce MAC using SELinux

Create and enforce MAC using SELinux - Linux Tutorial

From the course: Linux Foundation Certified System Administrator (LFCS) Cert Prep

Start my 1-month free trial Buy for my team

Create and enforce MAC using SELinux

“

- [Instructor] In this lesson, we'll explore how we can enforce mandatory access control with the help of the SELinux security module. Now, Red Hat and Cintas operating systems have SELinux enabled by default, but on Ubuntu, a different security module called AppArmor is used by default. Whenever we end up on a system that was set up by other people, if we need SELinux, we should first check if it's already configured before we attempt to install anything. We'll explore how to check the security module status later in our lesson. But since we know our system doesn't have SELinux, let's see how we can get it started from scratch on Ubuntu. Since AppArmor is enabled by default, first, we'll have to disable that. Using two security modules at the same time might lead to conflicts or unexpected results, so first, we need to stop the AppArmor service. Then we disable AppArmor from automatically starting up when the system boots. Next, to get started with SELinux, we install these two…

Contents