1 Prerequisites This skill 0 Unlocked

Skill · Linux · Secure a Linux system

Run a server under SELinux or AppArmor: modes, contexts and troubleshooting

Run a server under SELinux or AppArmor: choose the mode, persistently fix a file or port context, toggle a boolean, reload a profile, and read a denial to resolve it without disabling protection. Writing a service profile belongs to linux.service.confine.

Start lesson 1The Linux domain

• 3 lessons
• ~3 h 20 of reading
• 2 quizzes
• 2 proof labs

The path

Where it comes from, where it leads

What you need to know first, where you stand on this skill, and what it opens next. Your status is computed in your browser, from what you have read and passed.

Before · 1 prerequisite

• Manage users, permissions and processes

This skill, for you

Run a server under SELinux or AppArmor: modes, contexts and troubleshooting

Computing

It unlocks · nothing yet

No other skill requires it: it is an end-of-path skill.

Lessons

How to learn it

3 lessons, about ~3 h 20, in program order. Each lesson ends with its quiz.

The program

3 lessons · ~3 h 20

1. 1Secure a Linux server, the complete path· 15 min
2. 2SELinux: understand, troubleshoot and disable· 130 min
3. 3Understand and use AppArmor· 55 min

Beyond the lessons

Assess, practise, pass the proof

Reading a lesson confirms nothing. A skill is confirmed by a passed quiz, practised in a guided lab, and put to the test by a challenge or a mission; an imported lab result is not verified by the site.

Assess yourself

2 quizzes

At the end of the lessons: passed at 70%, they confirm the skill.

Practice

4 guided labs

• Allow a service with SELinux: persistent boolean and labeled port
• Fix a file's SELinux context, persistently
• Diagnose an SELinux denial (AVC) and fix it the right way
• Manage an AppArmor profile: switch it to complain mode

Proof

2 practical proofs

• Drill, AppArmor under exam conditions
• Drill, SELinux under exam conditions

A practical proof is a challenge, a capstone or a declared lab.

Used by the mission “Put a server into production”, which has its proof.

Around it

Who requires it, who teaches it

Required by

• Linux Administrator
• Cloud Engineer
• LFCS
• RHCSA (EX200, RHEL 10)

In red: the certification it prepares for.

Taught by

• Linux Training

Same block · Secure a Linux system

• Manage a server's accounts and delegation: users, groups, LDAP directory, sudo and ACLs
• Filter a server's traffic with a host firewall, NAT included

×

See in the glossary →