Thanks! This finally fixed my permission issues with mounted files in podman containers from my home directory.

must watch agn

The car analogy fails: the only problem SELinux can ever tell you is that SELinux is not happy. Disabling it is the same as removing a faulty car alarm which randomly sets off all the time for no reason.

Feelings propelled us to do wonderful things, never stop talking about them, wonderful talk!

This guy is so funny 😅

The presentation is awesome but my right ear channel is corrupted.

This video perfectly summary of what SEL is.

very helpful

It's been 6 years now, But I still don't understand SELINUX 😂

Very helpful and demystifying!

Fantastic talk! I feel like for the first time in years, systemd started making some sense to me.

To fix the audio, you can use "ffmpeg -i original.mp4 -c:v copy -af 'pan=stereo|FL=FL|FR=FL' fixed.mp4" (Cheers to StackOverflow user ZR Han)

Recently I approached RedHat Apac Consulting through the firm, where i am working and after multiple reminder to their team, we found no response. Apparently, it may be the case that RedHat would have eventually falied to develop this utlity and shelevd the project

Do we have updated presentation for RHEL8 / 9?

This was a great presentation. Thank you sir!

Could not watch with audio in one ear.

not me watching this for cgroups and they skip

Excellent presentation skill! I don't use SELinux in the workplace but I'm confident to say I can handle basic situations by restorecon and semanage. Brovo, very nice presentation!

Anybody has an idea where can I find those slides?

It was great!

0:48

Funny how people who hate when others talk about feelings sure have a looooot of feelings about it.

Perfect!!! Thanks for such an easy-to-understand approach!!!

Does the SELinux labels do anything in a system that isn't using SELinux? So, if I physically remove the hard disk from a system protected by SELinux and mount it on a system that doesn't use SELinux, will the labels still protect the home folder of the user who chmod 777'd all his files or will I be able to read them because only DAC is active then? The second, right?

Why would anyone listen to a person who oversaw 24 consecutive quarters of revenue decline and a 2/3 reduction of equity, while personally enriching herself? She's a total failure.

I find it funny that corporations are so worried about security but yet will force employees to run Windows as their desktop when that is about the worse thing you can run on your desktop.

Sometimes, "Microservices is about optimizing... for CAPACITY"

I need you to explain all of RHEL

Thank you. Your experience shows in the way you have explained difficult subject in such an easy manner.

The example of the PHP attack, blew up my mind. And yes, I am guilty of disabling SELinux.

Paul Cormier RED HAT chairman isaDEIdouchebag. #OMG

Awesome talk, and I loved Command Line Heroes!

Moron!!!! You might have made systemd but too me your a moron!!!!

Organize Your Playbooks and Roles: Structure your playbooks and roles logically. Keep related tasks together in separate roles and playbooks. Use a version control system like Git to manage your Ansible codebase.

I'd rather have nix package manager than selinux on my Fedora desktop. And apparently you can't have both.

Parochial really is the perfect word. I had forgotten what it meant. But very quickly realized: early 16th century Germany. That’s what it means.

Hmm... I tried to enjoy it.. But there's some points on there that you REALLLLLLLY laboured with pointless waffle.. I'm pretty sure everyone knows what an async message is for example @18:40. Unless this of course was aimed at high school students?

SELinux is not user friendly. It's no surprise so many admins turn it off. I just finished spending all night trying to get SELinux to allow a web server to access a folder in a user directory for a website. I could not figure it out and I've been doing this for 20 years. I finally got it working by disabling SELinux. It's not a very good security program, if the only way to efficiently work with it is to turn it off.

gold. always fixed selinux bugs with stackoverflow and crossed fingers, not anymore

The best video on Satellite I have seen on KZbin. My only problem is I would love to see an updated version! Otherwise, I was able to cobble through it and make it work on my Satellite 6.11 server. Thank you so much!

I wonder if the speaker's ancestors were bearded bakers and were like, "how do we combine the words beard and bread for our name?"

I have been watching this video so many times that I almost know it by memory, now SELinux is starting to make more sense for me :)

Great video for explaining SELinux but it changes nothing. In the real world, under a time pressure... you're going to just disable SELinux temporarily and move on with more important tasks. Like today when I had to change the timezone on the server, finding SELinux prevents the timedatectl command working. And your online help documentation is behind a paywall I don't have access to. Nothing covered in this video makes "the proper way" to fix that problem any more apparent.

This beat is fire.

More like Manage Windows from Linux. Doesn't run on Windows

I am unclear on something. If you see from the logs that SELinux is blocking something, how do you know you should "fix" that by allowing the access? Maybe the "denied" or "prevented" messages should not be "fixed", because denying is exactly the right thing to do.

an overly abstract presentation, to be fair really not much concrete knowledge on the subject available here "compromises, conflicts, smth else, smth new: listed, yet not much set for sure..", etc )

Perfect. Thanks.

Awesome Red Hat!

Amazing