Mastering Linux Security and Hardening

Hands-on lab – SELinux type enforcement

In this lab, you'll install the Apache web server and the appropriate SELinux tools. You'll then view the effects of having the wrong SELinux type assigned to a web content file.

1. Install Apache, along with all the required SELinux tools:

        sudo yum install httpd setroubleshoot setools         policycoreutils policycoreutils-python

2. Activate setroubleshoot by restarting the auditd service:

        sudo service auditd restart

3. Enable and start the Apache service and open port 80 on the firewall:

        sudo systemctl enable --now httpd        sudo firewall-cmd --permanent --add-service=http        sudo firewall-cmd --reload

4. In the /var/www/html directory, create an index.html file with the following contents:

        <html>          <head> <title>SELinux ...