This two-part, hands-on course attempts to break down some of the barriers to SELinux adoption in your organization.

Part One focuses on a high-speed introduction to SELinux and a troubleshooting strategy to help you diagnose and correct issues due to SELinux. Part Two gets into the guts of SELinux and provides guidance on developing SELinux policies for new services.

In most organizations, the only thought given to SELinux is remembering to turn it off when installing new systems. And yet as I respond to intrusion after intrusion on Linux systems, I know that most of them would never have happened had SELinux been properly deployed.

SELinux has been hampered by a suspicious pedigree (“It comes from the NSA—fear it!”) and a horrible initial roll-out (“This breaks everything—kill it with fire!”). But largely the issue is that the SELinux universe stands outside the normal Linux security model and troubleshooting strategy. Things break in mysterious ways when you enable SELinux, and the fixes are not obvious.

Key Takeaways

Students will learn basic commands for interacting with the SELinux universe as well as how to:

Troubleshoot system issues where SELinux is enabled
Correct issues so your applications can work safely with SELinux
Extend the default SELinux policy to work with new applications

Who Should Take This Course

Linux SREs and System Admins
Security Engineers/Architects
Linux Developers/DevOps
SOC Analysts, Incident Responders

Audience Skill Level

Experience with Linux and the Linux command-line is preferred. No experience with SELinux is necessary or assumed.

Student Requirements

Students should be comfortable working with the Linux command line.

What Each Student Will Be Provided With

Students will receive course slides, author notes, lab exercises and virtual machine, all via electronic download.

A computer with high-speed Internet access
A BitTorrent client for downloading course materials (e.g., Transmission)
A computer with at least 150GB of free space and capable of running a 64-bit VMware virtual machine using 4GB of RAM

There are no scheduled live dates for this course at this time. Private training may be available.

On Demand Training

Train at your own pace with no set course schedule
Access to all course resources, including slides and VMs
Subject Matter Expert support through Discord
Tips, tools, and techniques that can be applied immediately upon returning to work
Strengthen your skills by solving challenges within the Antisyphon Cyber Range
Become part of a community driven to educate and share knowledge