Linux Labs· Identity and AccessLab 8 of 26

SELinux Port Labels and Booleans

A web server with a new site is refused by SELinux four times: two ports it may not listen on, a backend it may not connect to, and a home directory it may not read. Fix each one in the policy, with port labels and booleans, and never by leaving enforcing mode.

  • Intermediate
  • 30 min
  • Not rated yet
Start labPart of Advanced Linux System Administration
  • A real environment in your browser
  • You run the commands yourself
  • Your result is checked automatically

In this moduleIdentity and Access

  1. Special Permissions: setuid, setgid, and the Sticky Bit30 min
  2. Password Ageing and Account Expiry25 min
  3. SELinux Port Labels and BooleansYou are here
  4. Troubleshoot an SELinux Denial30 min