66 lines
1.4 KiB
Markdown
66 lines
1.4 KiB
Markdown
# Security Solutions
|
|
|
|
This section documents my solutions to security-related scenarios, including SELinux, firewall configuration, and security hardening.
|
|
|
|
## Scenario: SELinux Configuration
|
|
|
|
### Original Problem
|
|
[To be filled with actual scenario]
|
|
|
|
### Environment
|
|
- OS Version: RHEL/Rocky Linux
|
|
- Initial State: [Initial security configuration]
|
|
- Required Outcome: [Desired security setup]
|
|
|
|
### Solution Steps
|
|
1. Check Current SELinux Status
|
|
```bash
|
|
# Check SELinux status
|
|
getenforce
|
|
|
|
# Check SELinux contexts
|
|
ls -Z /var/www/html
|
|
```
|
|
[Explanation of current state]
|
|
|
|
2. Configure SELinux Policies
|
|
```bash
|
|
# Set SELinux boolean
|
|
setsebool -P httpd_can_network_connect on
|
|
|
|
# Modify context
|
|
semanage fcontext -a -t httpd_sys_content_t "/custom/path(/.*)?"
|
|
```
|
|
[Explanation of configuration]
|
|
|
|
3. Apply Changes
|
|
```bash
|
|
# Restore contexts
|
|
restorecon -Rv /custom/path
|
|
```
|
|
[Explanation of changes]
|
|
|
|
### Verification
|
|
```bash
|
|
# Verify SELinux status
|
|
sestatus
|
|
|
|
# Check audit logs
|
|
ausearch -m AVC -ts recent
|
|
|
|
# Test functionality
|
|
curl localhost/custom/path
|
|
```
|
|
|
|
### Key Learnings
|
|
- Understanding of SELinux concepts
|
|
- Security best practices
|
|
- Troubleshooting methodology
|
|
|
|
## Skills Demonstrated
|
|
- SELinux Management
|
|
- Firewall Configuration
|
|
- Security Auditing
|
|
- System Hardening
|
|
|
|
[Additional scenarios will be documented here as completed] |