Skip to content

Latest commit

 

History

History
34 lines (29 loc) · 1.32 KB

Day17_Task.md

File metadata and controls

34 lines (29 loc) · 1.32 KB

Day 17: Enhancing Security with SELinux

Task

Following a security audit, the xFusionCorp Industries security team has opted to enhance application and server security with SELinux.

Specifications:

  • Install the required SELinux packages.
  • Permanently disable SELinux for the time being.
  • Ensure that no reboot is required immediately, as a scheduled maintenance reboot is planned for tonight.
  • Disregard the current status of SELinux via the command line; the final status after the reboot should be disabled.

Steps:

  1. Log in to App Server 2 
    ssh your_username@app_server_ip
  2. Install SELinux Packages: 
    sudo yum install -y selinux-policy selinux-policy-targeted
  3. Disable SELinux Permanently: 
    sudo setenforce 0
sudo sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config
  4. Verify the Configuration: 
    cat /etc/selinux/config
  5. Command Explanation: 
    ssh your_username@app_server_ip: Log in to the app server.
sudo yum install -y selinux-policy selinux-policy-targeted: Install SELinux packages.
sudo setenforce 0: Set SELinux to permissive mode for the current session.
sudo sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config: Permanently disable SELinux.
cat /etc/selinux/config: Verify the SELinux configuration file.