SELinux help thread

Given that SELinux ships by default on Fedora, RHEL, CentOS, and others, yet it is often poorly understood, it might be good to have a (mega) thread to bring visibility to issues and get support on this topic.

Feel free to post questions, answers, and resources.


Resources

SELinux introduction coloring book (no joke!): GitHub - mairin/selinux-coloring-book: A coloring book to help folks understand how SELinux works.

Dan Walsh’s presentations (most useful IMO): https://fedorapeople.org/~dwalsh/Presentations/

Fedora: SELinux - Fedora Project Wiki
Getting started with SELinux :: Fedora Docs
RHEL: Using SELinux Red Hat Enterprise Linux 8 | Red Hat Customer Portal
CentOS: HowTos/SELinux - CentOS Wiki

SELinux with Docker/containers:

http://www.projectatomic.io/docs/docker-and-selinux/

8 Likes

Thank you. I need to learn more about SELinux.

I don’t use it proactively to do things I want to do, I only use it when it complains about something and I have to fix it. But, I assume it’s doing “good” things for me, so I refuse to simply disable it.

3 Likes

Unfortunately, https://stopdisablingselinux.com/ seems to be down now :slightly_frowning_face:

1 Like

Works for me. Good site :smiley:

1 Like

I have a question about nspawn and Fedora’s selinux: posted here in another thread.