Posts

Showing posts with the label SELinux

Understanding SELinux How it works

Image
SELinux on Ubuntu Here is a simple objective of this post is to install, activate and disable the SELinux on Ubunutu. What is actually SELinux? S ecurity- E nhanced Linux (SELinux) is a security architecture for Linux® systems that allows administrators to have more control over who can access the system. Security-Enhanced Linux is a Linux kernel security module that provides a mechanism for supporting access control security policies, including mandatory access controls. SELinux is a set of kernel modifications and user-space tools that have been added to various Linux distributions. Here I'll explore the possible options on Ubuntu. How to install SELinux on Ubuntu? This regular package installation apt install policycoreutils selinux-utils selinux-basics -y How to activate SELinux on Ubuntu? To activate the SELinux we need to edit the config file. selinux-activate To get this effected need to reboot the Linux VM/machine. Understanding Configure SELinux SE...

Docker Security

Hey, dear Docker DevOps enthusiast! In this post we will discuss about docker security, docker service security, docker engine-level security, etc. SELinux is Security-Enhanced Linux it provides a mechanism for supporting access control security policies SELinux is a set of kernel modifications and user-space tools that have been added to various Linux distros. The 'root' user by default owns the processes spawned by a container are run. secgroup limits the disk quota. Security Issue Rotate your join-token for both worker and manager when there is a suspicion that someone might have got access to the token for adding managers to the cluster. Secretes are immutable in a docker swarm cluster. They cannot be updated sof if you want to modify the secret then you have to create a new secret file and update that to the existing service. step 1: First we need to Create new secret, step 2: Attach the newly created secret with an update option the service to use this n...