updated solutions for practice scenerios
This commit is contained in:
@@ -0,0 +1,66 @@
|
||||
# Security Solutions
|
||||
|
||||
This section documents my solutions to security-related scenarios, including SELinux, firewall configuration, and security hardening.
|
||||
|
||||
## Scenario: SELinux Configuration
|
||||
|
||||
### Original Problem
|
||||
[To be filled with actual scenario]
|
||||
|
||||
### Environment
|
||||
- OS Version: RHEL/Rocky Linux
|
||||
- Initial State: [Initial security configuration]
|
||||
- Required Outcome: [Desired security setup]
|
||||
|
||||
### Solution Steps
|
||||
1. Check Current SELinux Status
|
||||
```bash
|
||||
# Check SELinux status
|
||||
getenforce
|
||||
|
||||
# Check SELinux contexts
|
||||
ls -Z /var/www/html
|
||||
```
|
||||
[Explanation of current state]
|
||||
|
||||
2. Configure SELinux Policies
|
||||
```bash
|
||||
# Set SELinux boolean
|
||||
setsebool -P httpd_can_network_connect on
|
||||
|
||||
# Modify context
|
||||
semanage fcontext -a -t httpd_sys_content_t "/custom/path(/.*)?"
|
||||
```
|
||||
[Explanation of configuration]
|
||||
|
||||
3. Apply Changes
|
||||
```bash
|
||||
# Restore contexts
|
||||
restorecon -Rv /custom/path
|
||||
```
|
||||
[Explanation of changes]
|
||||
|
||||
### Verification
|
||||
```bash
|
||||
# Verify SELinux status
|
||||
sestatus
|
||||
|
||||
# Check audit logs
|
||||
ausearch -m AVC -ts recent
|
||||
|
||||
# Test functionality
|
||||
curl localhost/custom/path
|
||||
```
|
||||
|
||||
### Key Learnings
|
||||
- Understanding of SELinux concepts
|
||||
- Security best practices
|
||||
- Troubleshooting methodology
|
||||
|
||||
## Skills Demonstrated
|
||||
- SELinux Management
|
||||
- Firewall Configuration
|
||||
- Security Auditing
|
||||
- System Hardening
|
||||
|
||||
[Additional scenarios will be documented here as completed]
|
||||
Reference in New Issue
Block a user