ubuntu:selinux:do_boolean_lockdown
This is an old revision of the document!
Ubuntu - SELinux - Do Boolean Lockdown
Run the getsebool -a command and lockdown system:
getsebool -a | less getsebool -a | grep off getsebool -a | grep on
To secure the machine, look at settings which are set to ‘on’ and change to ‘off’ if they do not apply to your setup with the help of setsebool command.
Set correct SE Linux booleans to maintain functionality and protection.
ubuntu/selinux/do_boolean_lockdown.1575490912.txt.gz · Last modified: 2020/07/15 09:30 (external edit)