Writing Targeted Policies for SELinux on Red Hat Enterprise Linux
This course teaches the development of SELinux policies that extend the Red Hat Enterprise Linux (RHEL) targeted policy set. It focuses on developing SELinux policies with the help of development tools included in RHEL, especially the sepolicy generate and audit2allow commands.
Audience
IT professionals responsible for securing applications running on Linux servers, such as:
-
System Administrators
-
Site Reliability Engineers
-
Application Developers
Prerequisites
Learners are expected to have experience managing RHEL servers, and some familiarity with managing SELinux on RHEL.
If you’re not new to SELinux but need a refresher on it’s day-to-day administration, please review:
-
The Enhance RHEL with SELinux tutorial by Red Hat Developers.
-
The Sysadmin Guide to SELinux by Alex Callejas
If you need an overview of SELinux, please review the following conceptual introduction:
-
Your visual how-to guide for SELinux policy enforcement by Daniel J Walsh
-
The SELinux Coloring Book eBook by Red Hat Developers
Classroom Environment
For now, there are no virtual labs for performing hands-on activities. You just need a RHEL server or VM with root access and from which you can download RPM packages from Red Hat repositories or a Yum mirror.
As course development progresses, some Red Hat Training course classroom or Red Hat Demo workshop environment will be selected as ready-to-use environments for hands-on activities.
You can also try these activities directly on your day-to-day machine or a local VM where you have installed RHEL.
If you do not have a test machine readily available, but you have access to a Red Hat Learning Subscription (as all Red Hat employees and partners do) you can use the virtual lab environment from Red Hat System Administration II (RH134). You can use either servera or serverb machines to perform all the activities in this course.
This course was tested with the RHEL 9.3 version of the RH134 classroom, but is expected to work with older and newer releases of that course classroom.
To use RH134 as your virtual lab for hands-on activities, please follow one of the following links:
Additional Red Hat Training About SELinux
Other Sources of Information About SELinux
Of course, the ultimate sources of information about SELinux are the Red Hat Enterprise Linux product documentation and the upstream sources from the Fedora Project and the SELinux project.
-
Using SELinux from the RHEL product documentation.
-
SELinux - Fedora Project Wiki as the community upstream from RHEL, provides important information on packaging.
-
The SELinux Notebook is te upstream documentation of the SELinux project.