|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/getting-started-with-selinux/
课程评论：没有评论
**课程名称：** SELinux 入门 **课程概述：** 本课程旨在帮助您快速掌握 Linux 系统中 SELinux 的基本概念和常用操作，让您在面对启用 SELinux 的系统时更有信心。课程内容设计简洁明了，每个模块都包含简短的介绍和几分钟的实际操作演示。视频平均时长约为 7 分钟。 **课程内容亮点：** 1. **SELinux 的功能与价值：** 了解 SELinux 在传统系统安全中的作用，以及它如何作为传统安全措施的补充而非替代。 2. **SELinux 的安装与模式：** 学习如何设置 SELinux，熟悉其不同的运行模式（如 Enforcing、Permissive）。 3. **标签（Labeling）的重要性：** 深入理解 SELinux 的核心机制——标签，以及标签如何决定进程对文件的访问权限。 4. **日志分析与故障排除：** 学习如何通过日志查找和解决 SELinux 阻止的操作，掌握检测和管理 SELinux 问题的技巧。 5. **布尔值（Booleans）的理解与应用：** 了解布尔值的概念及其功能，如何利用它们来灵活配置 SELinux。 6. **Linux 用户与 SELinux 用户：** 探讨 Linux 用户与 SELinux 用户之间的区别和联系。 7. **创建自定义 SELinux 策略模块：** 学习如何根据实际需求创建定制化的 SELinux 策略，增强系统的安全性。 **学习目标：** 完成本课程后，您将能够自信地管理已启用 SELinux（特别是 Enforcing 模式）的 Linux 系统。 **可选资源：** 课程资源部分提供可选的练习题以及所有课程内容的文本记录。
In this relatively short course we will cover the basic things you will run into once you activate SELinux on your system. All modules will start with a short introduction, followed by a hands on demonstration of a couple of minutes. The average length of the videos is about 7 minutes. By the end of this course you will hopefully feel more confident with managing SELinux. In the Resource section you will find optional exercises as well as the complete text of the sessions.We will start with what the function of SELinux is with regards to traditional system security and why it is not a replacement of traditional security but an addition to it. Then we will see how to set it up and which modes SELinux can be in. The next module will be on Labeling which is a very important feature to determine which process is allowed to access which files. We will continue with logging and finding out why a particular action is forbidden. We will see how detect and manage that. Also Booleans are dealt with: what are they and what is their function.We will also discuss and demonstrate the difference and relation of Linux users vs SELinux users.And we will finish with creating a custom SELinux policy module.By the end of this training I hope you will feel a lot more confident when you start working on a system where SELinux is not Disabled but Enforcing.
