From the course: Red Hat Certified System Administrator (EX200) Cert Prep: 2 File Access, Storage, and Security
Unlock the full course today
Join today to access over 22,500 courses taught by industry experts or purchase this course individually.
Solution: Manage security
From the course: Red Hat Certified System Administrator (EX200) Cert Prep: 2 File Access, Storage, and Security
Solution: Manage security
(upbeat music) - [Instructor] Let's recap what we did to set up this challenge. We installed Apache and moved the web document root to /home/webdoc. We configured ownership and permission so that discretionary access control would allow access. We configured Apache to allow access to the web files. We accessed our rhhost1.localnet.com and were denied by SELinux. Note that we have three different levels of access control. Apache allows or denies first, then the request goes to the Linux discretionary access control system using permissions and ownership. If access was granted at this stage, then the request has passed under SELinux which in our case denied access. Let's talk about a couple of possible solutions. You may have gotten an SE alert gooey pop-up window. If not just run as the alert from the command line, go into overview mode and type SE alert and it will come up. Once the SELinux alert browser window comes up, click on troubleshoot. You should see two issues on the…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
-
-
Set enforcing and permissive modes for SELinux5m 13s
-
(Locked)
List and identify SELinux file and process context3m 28s
-
(Locked)
Restore SELinux default file contexts4m 11s
-
(Locked)
Use Booleans to modify SELinux behavior2m 33s
-
(Locked)
Diagnose routine SELinux policy violations6m 57s
-
(Locked)
Maintain security context when managing files1m 6s
-
(Locked)
Manage firewalls with firewalld2m 58s
-
(Locked)
Challenge: Manage security3m 55s
-
(Locked)
Solution: Manage security6m 18s
-
-
-
-
-