80 likes | 237 Vues
This guide provides in-depth instructions on configuring Linux Firewall and SELinux for enhanced security. Learn how to activate the firewall using the GUI and allow specific services while blocking all others. Discover the importance of SELinux and its three modes: enforcing, permissive, and disabled. Understand how to manage SELinux policies to minimize risks associated with root-level access by malicious software. Follow step-by-step procedures to enable or disable SELinux, and ensure your system services are secure against unauthorized access.
E N D
Linux Security LINUX SECURITY
Linux Security Firewall Internet Application Web Server Firewall Database
Linux Security LINUX Firewall • Use GUI (Applications ->System Settings-> Security Level) to activate the firewall • Allow standard services and any specific port based application • All other services and ports are blocked
Linux Security LINUX Firewall
Linux Security SELinux • Malicious or broken software can have root-level access to the entire system by running as a root process. • SELinux (Security Enhanced Linux) provides enhanced security. • Through SELinux policies, a process can be granted just the permissions it needs to be functional, thus reducing the risk
Linux Security SELinux SELINUX can take one of these three values • enforcing - SELinux security policy is enforced. • permissive - SELinux prints warnings instead of enforcing. • disabled - SELinux is fully disabled.
Linux Security SELinux Configuration • Use GUI (Applications ->System Settings-> Security Level) to activate SELinux • Enable/Disable SELinux • Allow standard features in various services (http,nis,nfs,dns etc.) • All other services and features are blocked
Linux Security SELinux Configuration