RHCSA SELinux Questions || SELinux Example || semanage || RHEL 9

[@spelchk]

for the selinux context part - I had to install httpd to follow the exercise. Very good content!

[@pdavid555]

excellent lecture! You should always prioritize permanent solution : $setenforce 0 or 1 will only set it temporarily. Once the machine reboot you will lose the configuration

[@arghosinha]

One by one, gonna eat up all the videos. Thanks, really appreciate it. 👾👾

[@mikeharris8664]

Guys, for changing the port, the semanage-port man page literally gives the exact command that is needed. It's down at the very bottom. No need to memorize commands.

[@doaa7924]

you are literally a life saver. THANK YOUUU!!!

[@GopalPokhrel]

in mycase semanage-fcontext not been able to change the context of the /testweb. i did both semanage-fcontext and restorecon . someone share the possible reasons

[@ponnuponnu731]

when we change the Boolean using "setsebool" it is non persisten you said sir , so in exam how to set in persistent manner ?

[@ponnuponnu731]

is there any way to change or edit port in configuration file ? or semanage is the only option ?

[@harprem5124]

@dextutor I had a exam question asking for html port change to 81.in that case am I suppose to run the same selinux port command run for http?

[@juniali123]

when done adding context to /test dir after that when doing curl locahost/index.html" I'm getting message "you do not have permission to access /index.html" even though I have given full permission on the file 777, please let me know ASAP I will be taking the test next week. Thanks

[@dextutor]

Have you changed the SELinux context and edit the configuration file?

[@killakan86]

Thank you very much sir. But in 6:05 How should we know that the context here is httpd_port_t ? i would not have known it.

[@dextutor]

For ports the context is httpd_port_t. Its fixed

[@doaa7924]

you can use semanage port -l to see the list of contexts or SELinux Port Types

[@tonyg460]

semanage port -l | grep http

[@sandip542]

Can we reboot the server,,in rhcsa exam,,,for example if we change settings in/etc/selinuxconfig in order to get the changes persistent we need to reboot the server?

[@dextutor]

You can but there is no need to reboot. And in case you reset it by mistake you will loose all work

[@sandip542]

@@dextutor then what about if they ask like change selinux mode to permissive and it should be persistent....we need to alter the selinux config file na and changes should persist only after reboot right

[@dextutor]

Yes you can do

[@sandip542]

@@dextutor how to register for rhcsa 8 exam,,

[@ha7763]

If I receive an error message saying "httpd.service failed to start because the control process exited with error code" how can I fix this ?

[@dextutor]

Thete can be multiple reasons.. See if any solution in this link works stackoverflow.com/questions/37119479/job-for-httpd-service-failed-because-the-control-process-exited-with-error-code

[@Linuxenthusiast]

check what's the systemctl status httpd , and it will give you the error. I got the same error and was able to figure it out

[@TheMysteryMinds.]

hi dextutor, quick question can I use chcon -t rather than semanage fcontext "(.*)?" , restorecon -Rv

[@dextutor]

If it is giving the same result then surely you can

[@johnnydeals1705]

excellent job

[@robusthacker2800]

Will there be any questions for firewall-cmd ?

[@dextutor]

Yes..there can be..or you might have to use it in some other context also

[@senesiethomas7141]

brilliant presentation: my question is after allowing port 82, should we update the Apache configuration file(sudo vi /etc/httpd/conf/httpd.conf for the httpd service to listen to port 82 by modifying the listening port to 82 and starting and enable the http service? or the question will tell you if need be. Just wanted to know since i saw that you addended the port and I wanted to know if that is where to stop...Thank you very much for your wonderful dedication:

[@dextutor]

It would work directly

[@edith_1045]

Very well explained sir... Thank you

[@crimsonghoul8983]

Are they going to ask questions using http only or would they ask us to enable port or settings for other services or applications?

[@dextutor]

Anything can be asked. Even you might to have to enable a port for a question where it might not have been explicitly mentioned. The point is you should know how to work with everything

[@mauricionovoa9040]

great example!!!! on tree steep more used

[@lynx0808]

This was very helpful, thank you!

[@luvk421]

I'm not getting content part

[@sushilmestri]

Thank you sir !

[@warronfrench8163]

Have you ever heard of semanage login -a -s staff_u somuser causing networking to break? It happened to me three times this past week. It could be a coincidence but I was the only administrator on the machine.

[@dextutor]

No idea.. Sorry

[@kamaleshparthiban8532]

Hi bro can you make video what kind of questions will be asked in the exam rhel 8 RHCSA

[@dextutor]

Dear this video and the rest of the videos in the playlist contains exactly what you are looking for

[@luvk421]

@@dextutor hiya from where can i get centOs 8? If I'm not wrong its dead on 31 dec 2021

[@ritredamehilamin1844]

@@dextutor 4fdfxddçfA da ßßßs2qasf

[@gnanatejaags2163]

Please do video on "containers".

[@dextutor]

Coming soon

[@dextutor]

kzbin.info/www/bejne/paqrnqB9jZVkrq8 kzbin.info/www/bejne/ona0eGWal8innMU

[@nandhiniramamurthy4290]

Please do a video on autofs

[@dextutor]

Sure

[@juniali123]

I got it,

[@rottenfist220]

Warning in RHEL9 you cannot completely disable SELinux anymore.

[@dextutor]

Check access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html-single/using_selinux/index