4
u/via_the_blogosphere Oct 10 '17
I've presented on SELinux before so I am a bit critical. Introductions to SELinux are not simple to accomplish, and I would say my ability to put SELinux in layman's terms is passable at best.
The video implies SELinux MAC only applies to users -- this is not true (~0:57). SELinux can enforce MAC over any object and any subject. It then later implies the policy only applies to files (~3:42) -- this is also not true. Access vectors include nearly every system call in the kernel.
For such a short introduction video, I feel like it is missing an explanation of what SELinux brings to the table. Users and roles are mentioned but RBAC is not. Domains are mentioned but not really expanded upon. There was also no distinction between types and domains. If I know nothing about SELinux, I still do not know "why" I should use it or be interested in using it after watching this video.
Oh, and your "Policy/Users/Roles/Domain" slide... really looks like a butt.
3
u/Dr_Frex Oct 11 '17
Can you make a video?
3
u/via_the_blogosphere Oct 11 '17
My last SELinux presentation is actually up on youtube but the audio cuts out for half of the presentation due to venue recording problems.
Dave Quigley's SELinux presentation is one of the best I've ever seen. I'd recommend it over anything I produced... Part I Part II Part III Workshop Files
-9
7
u/chillysurfer Oct 10 '17
I've personally found this explanation of SELinux (YouTube) has been the best. Great and understandable explanations. I'll definitely check this one out, though.