Summary
We saw how to toggle SELinux policy Booleans using tools such as setsebool
and to get more information about Booleans, both from their description (using semanage boolean
) and the rules they influence (using sesearch
).
Next, we created our own policy modules to enhance the SELinux policy using various examples such as user domain definitions, web application types, SECMARK
types, and many more.
With all this completed, we now have all the experience needed to successfully administer a SELinux system.