From 3f90bcbbf6b2b16d167b30fc6c39a3494ad94d2d Mon Sep 17 00:00:00 2001 From: Alexander Jacocks Date: Mon, 29 Jul 2024 11:23:45 -0400 Subject: [PATCH] update public site --- 404.html | 2 +- about/index.html | 2 +- contact/index.html | 2 +- events/index.html | 2 +- events/index.xml | 9 +- images/Logo-Red_Hat-C-Standard-RGB-small.png | Bin 0 -> 13609 bytes images/Logo-Red_Hat-C-Standard-RGB.png | Bin 0 -> 14314 bytes index.html | 6 +- index.xml | 1722 +++-------------- jr-sa/index.html | 2 +- sitemap.xml | 1302 ++++--------- workshops/agile_integrations_ci/index.html | 2 +- workshops/agile_integrations_ci/index.xml | 65 +- .../agile_integrations_ci/lab01/index.html | 194 +- .../agile_integrations_ci/lab02/index.html | 32 +- .../agile_integrations_ci/lab03/index.html | 82 +- .../agile_integrations_ci/lab04/index.html | 36 +- .../agile_integrations_ci/lab05/index.html | 56 +- .../agile_integrations_ci/lab06/index.html | 10 +- .../agile_integrations_ci/lab07/index.html | 40 +- .../openshift/index.html | 10 +- .../prerequisites/index.html | 2 +- workshops/agile_integrations_dev/index.html | 2 +- workshops/agile_integrations_dev/index.xml | 70 +- .../agile_integrations_dev/lab01/index.html | 26 +- .../agile_integrations_dev/lab02/index.html | 60 +- .../agile_integrations_dev/lab03/index.html | 523 +++-- .../agile_integrations_dev/lab04/index.html | 119 +- .../agile_integrations_dev/lab05/index.html | 82 +- .../agile_integrations_dev/lab06/index.html | 12 +- .../agile_integrations_dev/lab07/index.html | 10 +- .../agile_integrations_dev/lab08/index.html | 30 +- .../openshift/index.html | 10 +- .../prerequisites/index.html | 2 +- .../exercise1.0/index.html | 48 +- .../exercise1.1/index.html | 20 +- .../exercise1.2/index.html | 44 +- .../exercise2.0/index.html | 40 +- .../exercise2.1/index.html | 30 +- .../exercise3.0/index.html | 40 +- .../exercise3.1/index.html | 36 +- .../exercise3.2/index.html | 18 +- .../exercise3.3/index.html | 26 +- .../exercise4.0/index.html | 32 +- .../alpha/ansible_with_rhocp_edge/index.html | 32 +- .../alpha/ansible_with_rhocp_edge/index.xml | 76 +- .../ansible_with_rhocp_edge/setup/index.html | 46 +- .../ansible_with_rhocp_edge/wrapup/index.html | 6 +- workshops/ansible_ansible/index.html | 6 +- workshops/ansible_ansible/index.xml | 25 +- .../ansible_automation/exercise1.0/index.html | 78 +- .../ansible_automation/exercise1.1/index.html | 30 +- .../ansible_automation/exercise1.2/index.html | 28 +- .../ansible_automation/exercise1.3/index.html | 66 +- .../ansible_automation/exercise1.4/index.html | 16 +- .../ansible_automation/exercise1.5/index.html | 46 +- .../ansible_automation/exercise2.0/index.html | 32 +- .../ansible_automation/exercise2.1/index.html | 64 +- .../ansible_automation/exercise2.2/index.html | 62 +- .../ansible_automation/exercise3.0/index.html | 44 +- workshops/ansible_automation/index.html | 10 +- workshops/ansible_automation/index.xml | 72 +- workshops/ansible_automation/setup/index.html | 24 +- .../ansible_automation/wrapup/index.html | 6 +- .../exercise1.0/index.html | 56 +- .../exercise1.1/index.html | 18 +- .../exercise1.2/index.html | 24 +- .../exercise1.3/index.html | 60 +- .../exercise1.4/index.html | 14 +- .../exercise1.5/index.html | 42 +- .../exercise2.0/index.html | 26 +- .../exercise2.1/index.html | 64 +- .../exercise2.2/index.html | 60 +- .../exercise3.0/index.html | 44 +- workshops/ansible_tower_azure/index.html | 4 +- workshops/ansible_tower_azure/index.xml | 74 +- .../ansible_tower_azure/setup/index.html | 16 +- .../ansible_tower_azure/wrapup/index.html | 6 +- .../exercise1.0/index.html | 46 +- .../exercise1.1/index.html | 62 +- workshops/ansible_tower_intro/index.html | 10 +- workshops/ansible_tower_intro/index.xml | 35 +- .../ansible_tower_intro/setup/index.html | 16 +- .../ansible_tower_intro/wrapup/index.html | 6 +- workshops/cloudforms41/exercise1.0/index.html | 2 +- workshops/cloudforms41/exercise1.1/index.html | 2 +- .../cloudforms41/exercise1.10/index.html | 2 +- .../cloudforms41/exercise1.11/index.html | 2 +- .../cloudforms41/exercise1.12/index.html | 2 +- .../cloudforms41/exercise1.13/index.html | 2 +- .../cloudforms41/exercise1.14/index.html | 2 +- .../cloudforms41/exercise1.15/index.html | 2 +- .../cloudforms41/exercise1.16/index.html | 2 +- .../cloudforms41/exercise1.17/index.html | 72 +- .../cloudforms41/exercise1.18/index.html | 16 +- .../cloudforms41/exercise1.19/index.html | 30 +- workshops/cloudforms41/exercise1.2/index.html | 2 +- .../cloudforms41/exercise1.20/index.html | 24 +- workshops/cloudforms41/exercise1.3/index.html | 2 +- workshops/cloudforms41/exercise1.4/index.html | 2 +- workshops/cloudforms41/exercise1.5/index.html | 2 +- workshops/cloudforms41/exercise1.6/index.html | 2 +- workshops/cloudforms41/exercise1.7/index.html | 2 +- workshops/cloudforms41/exercise1.8/index.html | 2 +- workshops/cloudforms41/exercise1.9/index.html | 2 +- workshops/cloudforms41/index.html | 2 +- workshops/cloudforms41/index.xml | 147 +- .../cloudforms41/prerequisites/index.html | 2 +- workshops/cloudforms41/wrapup/index.html | 2 +- .../containers_101/exercise1.0/index.html | 12 +- .../containers_101/exercise1.1/index.html | 16 +- .../containers_101/exercise1.2/index.html | 82 +- .../containers_101/exercise1.3/index.html | 22 +- .../containers_101/exercise1.4/index.html | 24 +- workshops/containers_101/index.html | 12 +- workshops/containers_101/index.xml | 48 +- workshops/containers_101/setup/index.html | 26 +- workshops/containers_101/wrapup/index.html | 2 +- .../exercise1/index.html | 16 +- .../exercise2/index.html | 32 +- .../exercise3/index.html | 20 +- .../exercise4/index.html | 28 +- .../exercise5/index.html | 14 +- .../exercise6/index.html | 32 +- .../exercise7/index.html | 26 +- workshops/containers_the_hard_way/index.html | 12 +- workshops/containers_the_hard_way/index.xml | 48 +- .../containers_the_hard_way/intro/index.html | 46 +- .../containers_the_hard_way/wrapup/index.html | 6 +- workshops/dynatrace_openshift/index.html | 6 +- workshops/dynatrace_openshift/index.xml | 84 +- workshops/index.html | 6 +- workshops/index.xml | 173 +- workshops/jdv_dev/exercise1/index.html | 18 +- workshops/jdv_dev/exercise10/index.html | 2 +- workshops/jdv_dev/exercise2/index.html | 6 +- workshops/jdv_dev/exercise3/index.html | 6 +- workshops/jdv_dev/exercise4/index.html | 2 +- workshops/jdv_dev/exercise5/index.html | 2 +- workshops/jdv_dev/exercise6/index.html | 2 +- workshops/jdv_dev/exercise7/index.html | 2 +- workshops/jdv_dev/exercise8/index.html | 8 +- workshops/jdv_dev/exercise9/index.html | 4 +- workshops/jdv_dev/index.html | 2 +- workshops/jdv_dev/index.xml | 94 +- workshops/jdv_dev/prerequisites/index.html | 2 +- workshops/jdv_dev/wrapup/index.html | 2 +- .../openshift_101_dcmetromap/fin/index.html | 10 +- workshops/openshift_101_dcmetromap/index.html | 10 +- workshops/openshift_101_dcmetromap/index.xml | 69 +- .../lab1-welcome/index.html | 32 +- .../lab2-byodocker/index.html | 36 +- .../lab3-s2i/index.html | 40 +- .../lab4-devmanage/index.html | 80 +- .../lab5-rollbacks/index.html | 28 +- .../lab6-replicationrecovery/index.html | 56 +- .../lab7-labels/index.html | 32 +- .../lab8-cicd/index.html | 338 ++-- .../lab9-bluegreen/index.html | 38 +- .../login_tour_wetty/index.html | 14 +- .../prerequisites/index.html | 10 +- workshops/openshift_4_101/fin/index.html | 10 +- workshops/openshift_4_101/index.html | 10 +- workshops/openshift_4_101/index.xml | 100 +- workshops/openshift_4_101/keyterms/index.html | 2 +- .../openshift_4_101/lab1-welcome/index.html | 28 +- .../lab2-byocontainer/index.html | 16 +- .../lab2.1-byocontainer/index.html | 26 +- .../lab2.2-byocontainer/index.html | 16 +- workshops/openshift_4_101/lab3-s2i/index.html | 10 +- .../openshift_4_101/lab3.1-s2i/index.html | 30 +- .../openshift_4_101/lab4-devmanage/index.html | 78 +- .../openshift_4_101/lab5-rollbacks/index.html | 48 +- .../lab6-replicationrecovery/index.html | 22 +- .../lab6.1-replicationrecovery/index.html | 26 +- .../lab6.2-replicationrecovery/index.html | 28 +- .../openshift_4_101/lab7-labels/index.html | 64 +- .../openshift_4_101/lab8-cicd/index.html | 42 +- .../openshift_4_101/lab9-bluegreen/index.html | 54 +- .../openshift_4_101/prerequisites/index.html | 10 +- .../openshift_4_101_dynatrace/fin/index.html | 10 +- .../openshift_4_101_dynatrace/index.html | 10 +- workshops/openshift_4_101_dynatrace/index.xml | 9 +- .../lab1-welcome/index.html | 40 +- .../lab10-labels/index.html | 64 +- .../lab11-cicd/index.html | 46 +- .../lab12-bluegreen/index.html | 58 +- .../lab2-byocontainer/index.html | 102 +- .../lab3-installagent/index.html | 160 +- .../lab4-configdynatraceactivegate/index.html | 46 +- .../lab5-s2i/index.html | 42 +- .../lab6-deploy3tierapp/index.html | 10 +- .../lab7-devmanage/index.html | 82 +- .../lab8-rollbacks/index.html | 46 +- .../lab9-replicationrecovery/index.html | 56 +- .../prerequisites/index.html | 10 +- workshops/openshift_serverless/index.html | 2 +- workshops/openshift_serverless/index.xml | 9 +- workshops/openshift_service_mesh/index.html | 2 +- workshops/openshift_service_mesh/index.xml | 9 +- .../fin/index.html | 10 +- .../openshift_service_mesh_v1.0/index.html | 10 +- .../openshift_service_mesh_v1.0/index.xml | 118 +- .../lab1.1_welcome/index.html | 10 +- .../lab1.2_terminal/index.html | 14 +- .../lab1.3_installing/index.html | 32 +- .../lab1.4_deploymsa/index.html | 36 +- .../lab2.1_userprofile/index.html | 34 +- .../lab2.2_deployuserprofile/index.html | 32 +- .../lab2.3_kiali/index.html | 18 +- .../lab3.1_featureupdate/index.html | 32 +- .../lab3.2_grafana/index.html | 18 +- .../lab3.3_jaeger/index.html | 24 +- .../lab4.1_routingtraffic/index.html | 42 +- .../lab4.2_trafficsplitting/index.html | 56 +- .../lab4.3_faultinjection/index.html | 28 +- .../lab4.4_circuitbreaking/index.html | 24 +- .../lab5.1_intromtls/index.html | 58 +- .../lab5.2_verifymtls/index.html | 16 +- .../lab5.3_prep/index.html | 40 +- .../lab5.4_authpolicy/index.html | 46 +- .../lab5.5_secureingressegress/index.html | 32 +- workshops/pki_workshop/readme/index.html | 2 +- .../unit_lessons/unit_1/index.html | 2 +- .../unit_lessons/unit_10/index.html | 2 +- .../unit_lessons/unit_11/index.html | 2 +- .../unit_lessons/unit_12/index.html | 2 +- .../unit_lessons/unit_2/index.html | 2 +- .../unit_lessons/unit_3/index.html | 2 +- .../unit_lessons/unit_4/index.html | 2 +- .../unit_lessons/unit_5/index.html | 2 +- .../unit_lessons/unit_6/index.html | 2 +- .../unit_lessons/unit_7/index.html | 2 +- .../unit_lessons/unit_8/index.html | 2 +- .../unit_lessons/unit_9/index.html | 2 +- workshops/rhel_8/exercise1.0/index.html | 12 +- workshops/rhel_8/exercise1.1/index.html | 10 +- workshops/rhel_8/exercise1.2/index.html | 90 +- workshops/rhel_8/exercise1.3/index.html | 38 +- workshops/rhel_8/exercise1.4/index.html | 40 +- workshops/rhel_8/exercise1.5/index.html | 26 +- workshops/rhel_8/exercise1.6/index.html | 10 +- workshops/rhel_8/exercise1.7/index.html | 54 +- workshops/rhel_8/exercise1.8/index.html | 84 +- workshops/rhel_8/exercise1.9/index.html | 60 +- workshops/rhel_8/index.html | 14 +- workshops/rhel_8/index.xml | 75 +- workshops/rhel_8/setup/index.html | 28 +- workshops/rhel_8/wrapup/index.html | 14 +- workshops/rhosp_101/10_storage/index.html | 85 +- workshops/rhosp_101/1_introduction/index.html | 15 +- .../rhosp_101/2_login_to_horizon/index.html | 22 +- .../rhosp_101/3_managing_networks/index.html | 78 +- .../index.html | 36 +- .../5_managing_security_groups/index.html | 85 +- .../rhosp_101/6_managing_images/index.html | 29 +- .../rhosp_101/7_managing_instances/index.html | 106 +- .../rhosp_101/8_using_the_cli/index.html | 60 +- workshops/rhosp_101/9_heat/index.html | 49 +- workshops/rhosp_101/fin/index.html | 2 +- workshops/rhosp_101/index.html | 8 +- workshops/rhosp_101/index.xml | 67 +- .../secure_software_factory/fin/index.html | 2 +- workshops/secure_software_factory/index.html | 10 +- workshops/secure_software_factory/index.xml | 140 +- .../secure_software_factory/lab01/index.html | 20 +- .../secure_software_factory/lab02/index.html | 14 +- .../secure_software_factory/lab03/index.html | 10 +- .../secure_software_factory/lab04/index.html | 20 +- .../secure_software_factory/lab05/index.html | 36 +- .../secure_software_factory/lab06/index.html | 36 +- .../secure_software_factory/lab07/index.html | 24 +- .../secure_software_factory/lab08/index.html | 22 +- .../secure_software_factory/lab09/index.html | 22 +- .../secure_software_factory/lab10/index.html | 28 +- .../secure_software_factory/lab11/index.html | 26 +- .../secure_software_factory/lab12/index.html | 38 +- .../secure_software_factory/lab13/index.html | 38 +- .../secure_software_factory/lab14/index.html | 98 +- .../secure_software_factory/lab15/index.html | 12 +- .../secure_software_factory/lab16/index.html | 10 +- .../secure_software_factory/lab17/index.html | 46 +- .../secure_software_factory/lab18/index.html | 38 +- .../login_tour_wetty/index.html | 18 +- .../prerequisites/index.html | 10 +- .../secure_software_factory/readme/index.html | 2 +- workshops/security_container_intro/index.html | 14 +- workshops/security_container_intro/index.xml | 47 +- .../lab01-intro/index.html | 40 +- .../lab02-registry/index.html | 49 +- .../lab03-podman/index.html | 70 +- .../lab04-isolation/index.html | 52 +- .../lab05-selinux/index.html | 37 +- .../lab06-inspecting/index.html | 38 +- .../lab07-signing/index.html | 45 +- .../lab08-builds/index.html | 34 +- .../lab99-conclusion/index.html | 10 +- .../exercise1.0/index.html | 62 +- .../exercise1.1/index.html | 88 +- .../exercise1.2/index.html | 24 +- .../exercise1.3/index.html | 16 +- .../exercise1.4/index.html | 16 +- .../exercise1.5/index.html | 68 +- .../exercise1.6/index.html | 16 +- .../exercise1.7/index.html | 130 +- .../exercise1.8/index.html | 34 +- .../exercise1.9/index.html | 16 +- workshops/security_containers/index.html | 10 +- workshops/security_containers/index.xml | 77 +- .../security_containers/setup/index.html | 22 +- .../security_containers/wrapup/index.html | 4 +- .../security_openshift/exercise1.0/index.html | 32 +- .../security_openshift/exercise1.1/index.html | 46 +- .../security_openshift/exercise1.2/index.html | 16 +- .../security_openshift/exercise1.3/index.html | 22 +- .../security_openshift/exercise1.4/index.html | 18 +- .../security_openshift/exercise1.5/index.html | 28 +- .../security_openshift/exercise1.6/index.html | 1252 ++++++------ .../security_openshift/exercise1.7/index.html | 50 +- .../security_openshift/exercise1.8/index.html | 166 +- .../security_openshift/exercise1.9/index.html | 36 +- workshops/security_openshift/index.html | 6 +- workshops/security_openshift/index.xml | 71 +- workshops/security_openshift/setup/index.html | 14 +- .../security_openshift/wrapup/index.html | 4 +- .../selinux_policy/exercise1.0/index.html | 23 +- .../selinux_policy/exercise1.1/index.html | 212 +- .../selinux_policy/exercise1.2/index.html | 89 +- .../selinux_policy/exercise1.3/index.html | 1035 ++++++++++ .../selinux_policy/exercise1.4/index.html | 1043 ++++++++++ .../selinux_policy/exercise2.0/index.html | 63 +- .../selinux_policy/exercise2.1/index.html | 95 +- .../selinux_policy/exercise2.2/index.html | 145 +- .../selinux_policy/exercise2.3/index.html | 98 +- .../selinux_policy/exercise2.4/index.html | 132 +- .../selinux_policy/exercise2.5/index.html | 967 +++++++++ workshops/selinux_policy/index.html | 50 +- workshops/selinux_policy/index.xml | 95 +- workshops/selinux_policy/setup/index.html | 32 +- workshops/selinux_policy/wrapup/index.html | 56 +- .../source_to_image/conclusion/index.html | 2 +- .../containerize_app/index.html | 30 +- workshops/source_to_image/dice/index.html | 92 +- .../source_to_image/gochat_s2i/index.html | 354 ++-- workshops/source_to_image/index.html | 10 +- workshops/source_to_image/index.xml | 59 +- .../source_to_image/prerequisites/index.html | 10 +- .../source_to_image/run_the_app/index.html | 34 +- workshops/source_to_image/setup/index.html | 18 +- .../source_to_image/index.html | 164 +- workshops/strangling_the_monolith/index.html | 2 +- workshops/strangling_the_monolith/index.xml | 43 +- .../strangling_the_monolith/lab1/index.html | 122 +- .../strangling_the_monolith/lab2/index.html | 146 +- .../strangling_the_monolith/lab3/index.html | 169 +- .../login_tour_oc/index.html | 30 +- .../login_tour_wetty/index.html | 8 +- .../prerequisites/index.html | 2 +- 358 files changed, 10318 insertions(+), 10375 deletions(-) create mode 100644 images/Logo-Red_Hat-C-Standard-RGB-small.png create mode 100644 images/Logo-Red_Hat-C-Standard-RGB.png create mode 100644 workshops/selinux_policy/exercise1.3/index.html create mode 100644 workshops/selinux_policy/exercise1.4/index.html create mode 100644 workshops/selinux_policy/exercise2.5/index.html diff --git a/404.html b/404.html index 700bfeae9..9c7061093 100644 --- a/404.html +++ b/404.html @@ -290,7 +290,7 @@

404


@@ -936,7 +936,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1023,7 +1023,7 @@

Workshop Details


@@ -860,7 +860,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -947,7 +947,7 @@

Workshop Details


@@ -1025,7 +1025,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1111,7 +1111,7 @@

Workshop Details


@@ -935,7 +935,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1022,7 +1022,7 @@

Workshop Details


@@ -871,7 +871,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -958,7 +958,7 @@

Workshop Details


@@ -906,7 +906,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -993,7 +993,7 @@

Workshop Details


@@ -980,7 +980,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1067,7 +1067,7 @@

Workshop Details


@@ -852,7 +852,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -939,7 +939,7 @@

Workshop Details


@@ -936,7 +936,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1023,7 +1023,7 @@

Workshop Details


@@ -887,7 +887,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -970,7 +970,7 @@

Workshop Details


@@ -1001,7 +1001,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1054,7 +1054,7 @@

Workshop Details


@@ -920,7 +920,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1002,7 +1002,7 @@

Workshop Details


@@ -1087,7 +1087,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1174,7 +1174,7 @@

Workshop Details


@@ -1016,7 +1016,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1102,7 +1102,7 @@

Workshop Details


@@ -903,7 +903,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -990,7 +990,7 @@

Workshop Details


@@ -1143,7 +1143,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1229,7 +1229,7 @@

Workshop Details


@@ -837,7 +837,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -923,7 +923,7 @@

Workshop Details


@@ -1119,7 +1119,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1205,7 +1205,7 @@

Workshop Details


@@ -946,7 +946,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1033,7 +1033,7 @@

Workshop Details


@@ -1160,7 +1160,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1247,7 +1247,7 @@

Workshop Details


@@ -1067,7 +1067,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1153,7 +1153,7 @@

Workshop Details


@@ -1007,7 +1007,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1090,7 +1090,7 @@

Workshop Details


@@ -917,7 +917,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -970,7 +970,7 @@

Workshop Details


@@ -861,7 +861,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -943,7 +943,7 @@

Workshop Details


@@ -1003,7 +1003,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1090,7 +1090,7 @@

Workshop Details


@@ -1067,7 +1067,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1153,7 +1153,7 @@

Workshop Details


@@ -878,7 +878,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -931,7 +931,7 @@

Workshop Details


@@ -834,7 +834,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -917,7 +917,7 @@

Workshop Details


@@ -853,7 +853,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -939,7 +939,7 @@

Workshop Details


@@ -921,7 +921,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1007,7 +1007,7 @@

Workshop Details


@@ -1234,7 +1234,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1321,7 +1321,7 @@

Workshop Details


@@ -950,7 +950,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1037,7 +1037,7 @@

Workshop Details


@@ -924,7 +924,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1011,7 +1011,7 @@

Workshop Details


@@ -877,7 +877,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -930,7 +930,7 @@

Workshop Details


@@ -872,7 +872,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -954,7 +954,7 @@

Workshop Details


@@ -905,7 +905,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -991,7 +991,7 @@

Workshop Details


@@ -956,7 +956,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1042,7 +1042,7 @@

Workshop Details


@@ -884,7 +884,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -970,7 +970,7 @@

Workshop Details


@@ -919,7 +919,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1005,7 +1005,7 @@

Workshop Details


@@ -828,7 +828,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -912,7 +912,7 @@

Workshop Details


@@ -973,7 +973,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1059,7 +1059,7 @@

Workshop Details


@@ -928,7 +928,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1014,7 +1014,7 @@

Workshop Details


@@ -892,7 +892,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -945,7 +945,7 @@

Workshop Details


@@ -912,7 +912,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -994,7 +994,7 @@

Workshop Details


@@ -803,7 +803,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -882,7 +882,7 @@

Workshop Details


@@ -870,7 +870,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -920,7 +920,7 @@

Workshop Details


@@ -843,7 +843,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -926,7 +926,7 @@

Workshop Details


@@ -1017,7 +1017,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1100,7 +1100,7 @@

Workshop Details


@@ -1033,7 +1033,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1116,7 +1116,7 @@

Workshop Details


@@ -1165,7 +1165,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1248,7 +1248,7 @@

Workshop Details


@@ -1075,7 +1075,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1158,7 +1158,7 @@

Workshop Details


@@ -1045,7 +1045,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1128,7 +1128,7 @@

Workshop Details


@@ -901,7 +901,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -984,7 +984,7 @@

Workshop Details


@@ -1466,7 +1466,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1549,7 +1549,7 @@

Workshop Details


@@ -900,7 +900,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -983,7 +983,7 @@

Workshop Details


@@ -874,7 +874,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -957,7 +957,7 @@

Workshop Details


@@ -805,7 +805,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -884,7 +884,7 @@

Workshop Details


@@ -800,7 +800,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -879,7 +879,7 @@

Workshop Details


@@ -900,7 +900,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -950,7 +950,7 @@

Workshop Details


@@ -838,7 +838,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -921,7 +921,7 @@

Workshop Details


@@ -930,7 +930,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1013,7 +1013,7 @@

Workshop Details


@@ -841,7 +841,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -924,7 +924,7 @@

Workshop Details


@@ -808,7 +808,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -891,7 +891,7 @@

Workshop Details


@@ -904,7 +904,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -987,7 +987,7 @@

Workshop Details


@@ -945,7 +945,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1028,7 +1028,7 @@

Workshop Details


@@ -1227,7 +1227,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1310,7 +1310,7 @@

Workshop Details


@@ -1124,7 +1124,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1207,7 +1207,7 @@

Workshop Details


@@ -879,7 +879,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -962,7 +962,7 @@

Workshop Details


@@ -882,7 +882,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -965,7 +965,7 @@

Workshop Details


@@ -901,7 +901,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -984,7 +984,7 @@

Workshop Details


@@ -910,7 +910,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -993,7 +993,7 @@

Workshop Details


@@ -1136,7 +1136,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1219,7 +1219,7 @@

Workshop Details


@@ -915,7 +915,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -998,7 +998,7 @@

Workshop Details


@@ -804,7 +804,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -883,7 +883,7 @@

Workshop Details


@@ -800,7 +800,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -879,7 +879,7 @@

Workshop Details


@@ -884,7 +884,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -934,7 +934,7 @@

Workshop Details


@@ -906,7 +906,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -989,7 +989,7 @@

Workshop Details


@@ -902,7 +902,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -985,7 +985,7 @@

Workshop Details


@@ -1095,7 +1095,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1178,7 +1178,7 @@

Workshop Details


@@ -905,7 +905,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -988,7 +988,7 @@

Workshop Details


@@ -979,7 +979,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1062,7 +1062,7 @@

Workshop Details


@@ -960,7 +960,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1043,7 +1043,7 @@

Workshop Details


@@ -837,7 +837,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -920,7 +920,7 @@

Workshop Details


@@ -1066,7 +1066,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1149,7 +1149,7 @@

Workshop Details


@@ -806,7 +806,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -889,7 +889,7 @@

Workshop Details


@@ -1200,7 +1200,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1283,7 +1283,7 @@

Workshop Details


@@ -1095,7 +1095,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1178,7 +1178,7 @@

Workshop Details


@@ -1045,7 +1045,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1128,7 +1128,7 @@

Workshop Details


@@ -805,7 +805,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -884,7 +884,7 @@

Workshop Details


@@ -800,7 +800,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -879,7 +879,7 @@

Workshop Details


@@ -910,7 +910,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -960,7 +960,7 @@

Workshop Details


@@ -811,7 +811,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -890,7 +890,7 @@

Workshop Details


@@ -860,7 +860,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -943,7 +943,7 @@

Workshop Details


@@ -880,7 +880,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -963,7 +963,7 @@

Workshop Details


@@ -910,7 +910,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -993,7 +993,7 @@

Workshop Details


@@ -902,7 +902,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -985,7 +985,7 @@

Workshop Details


@@ -862,7 +862,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -945,7 +945,7 @@

Workshop Details


@@ -877,7 +877,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -960,7 +960,7 @@

Workshop Details


@@ -894,7 +894,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -977,7 +977,7 @@

Workshop Details


@@ -880,7 +880,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -963,7 +963,7 @@

Workshop Details


@@ -929,7 +929,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1012,7 +1012,7 @@

Workshop Details


@@ -994,7 +994,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1077,7 +1077,7 @@

Workshop Details


@@ -1037,7 +1037,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1120,7 +1120,7 @@

Workshop Details


@@ -929,7 +929,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1012,7 +1012,7 @@

Workshop Details


@@ -880,7 +880,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -963,7 +963,7 @@

Workshop Details


@@ -890,7 +890,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -973,7 +973,7 @@

Workshop Details


@@ -863,7 +863,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -946,7 +946,7 @@

Workshop Details


@@ -1015,7 +1015,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1098,7 +1098,7 @@

Workshop Details


@@ -946,7 +946,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1029,7 +1029,7 @@

Workshop Details


@@ -912,7 +912,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -995,7 +995,7 @@

Workshop Details


@@ -814,7 +814,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -900,7 +900,7 @@

Workshop Details


@@ -861,7 +861,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -947,7 +947,7 @@

Workshop Details


@@ -1238,7 +1238,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1325,7 +1325,7 @@

Workshop Details


@@ -1072,7 +1072,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1158,7 +1158,7 @@

Workshop Details


@@ -948,7 +948,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1035,7 +1035,7 @@

Workshop Details


@@ -878,7 +878,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -964,7 +964,7 @@

Workshop Details


@@ -993,7 +993,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1079,7 +1079,7 @@

Workshop Details


@@ -1085,7 +1085,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1171,7 +1171,7 @@

Workshop Details


@@ -1465,7 +1465,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1552,7 +1552,7 @@

Workshop Details


@@ -1182,7 +1182,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1268,7 +1268,7 @@

Workshop Details


@@ -983,7 +983,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1036,7 +1036,7 @@

Workshop Details


@@ -881,7 +881,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -963,7 +963,7 @@

Workshop Details


@@ -812,7 +812,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -892,7 +892,7 @@

Workshop Details

@@ -657,7 +646,7 @@

Workshop Details

@@ -536,7 +535,7 @@

Workshop Details

@@ -544,7 +542,7 @@

Workshop Details

@@ -655,7 +645,7 @@

Workshop Details

@@ -570,7 +566,7 @@

Workshop Details

@@ -664,7 +653,7 @@

Workshop Details

@@ -569,7 +566,7 @@

Workshop Details

@@ -676,7 +662,7 @@

Workshop Details

@@ -779,7 +779,7 @@

Workshop Details

@@ -661,7 +658,7 @@

Workshop Details

@@ -553,7 +553,7 @@

Workshop Details


@@ -919,7 +919,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -969,7 +969,7 @@

Workshop Details


@@ -839,7 +839,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -922,7 +922,7 @@

Workshop Details


@@ -807,7 +807,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -890,7 +890,7 @@

Workshop Details


@@ -831,7 +831,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -914,7 +914,7 @@

Workshop Details


@@ -812,7 +812,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -895,7 +895,7 @@

Workshop Details


@@ -862,7 +862,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -945,7 +945,7 @@

Workshop Details


@@ -859,7 +859,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -942,7 +942,7 @@

Workshop Details


@@ -826,7 +826,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -909,7 +909,7 @@

Workshop Details


@@ -844,7 +844,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -927,7 +927,7 @@

Workshop Details


@@ -826,7 +826,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -909,7 +909,7 @@

Workshop Details


@@ -851,7 +851,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -934,7 +934,7 @@

Workshop Details


@@ -834,7 +834,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -917,7 +917,7 @@

Workshop Details


@@ -867,7 +867,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -950,7 +950,7 @@

Workshop Details


@@ -850,7 +850,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -933,7 +933,7 @@

Workshop Details


@@ -1002,7 +1002,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1085,7 +1085,7 @@

Workshop Details


@@ -860,7 +860,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -943,7 +943,7 @@

Workshop Details


@@ -814,7 +814,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -897,7 +897,7 @@

Workshop Details


@@ -861,7 +861,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -944,7 +944,7 @@

Workshop Details


@@ -846,7 +846,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -929,7 +929,7 @@

Workshop Details


@@ -808,7 +808,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -891,7 +891,7 @@

Workshop Details


@@ -802,7 +802,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -881,7 +881,7 @@

Workshop Details


@@ -853,7 +853,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -906,7 +906,7 @@

Workshop Details


@@ -973,7 +963,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1057,7 +1047,7 @@

Workshop Details


@@ -1071,7 +1058,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1158,7 +1145,7 @@

Workshop Details


@@ -1387,7 +1369,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1474,7 +1456,7 @@

Workshop Details


@@ -1270,7 +1256,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1357,7 +1343,7 @@

Workshop Details


@@ -1295,7 +1282,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1382,7 +1369,7 @@

Workshop Details


@@ -996,7 +984,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1083,7 +1071,7 @@

Workshop Details


@@ -1234,7 +1221,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1321,7 +1308,7 @@

Workshop Details


@@ -971,7 +965,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1057,7 +1051,7 @@

Workshop Details


@@ -804,7 +804,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -884,7 +884,7 @@

Workshop Details


@@ -1092,7 +1092,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1179,7 +1179,7 @@

Workshop Details


@@ -1118,7 +1118,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1204,7 +1204,7 @@

Workshop Details


@@ -946,7 +946,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1035,7 +1035,7 @@

Workshop Details


@@ -958,7 +958,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1045,7 +1045,7 @@

Workshop Details


@@ -1121,7 +1121,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1208,7 +1208,7 @@

Workshop Details


@@ -1334,7 +1334,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1420,7 +1420,7 @@

Workshop Details


@@ -894,7 +894,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -981,7 +981,7 @@

Workshop Details


@@ -1386,7 +1386,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1473,7 +1473,7 @@

Workshop Details


@@ -1109,7 +1109,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1197,7 +1197,7 @@

Workshop Details


@@ -1189,7 +1189,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1275,7 +1275,7 @@

Workshop Details


@@ -941,7 +941,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -995,7 +995,7 @@

Workshop Details


@@ -852,7 +852,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -934,7 +934,7 @@

Workshop Details


@@ -998,7 +884,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1044,8 +930,6 @@

Workshop Details

- - @@ -1085,7 +969,7 @@

Workshop Details


@@ -908,7 +931,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -972,14 +995,14 @@

Workshop Details

@@ -995,7 +1018,7 @@

Workshop Details

+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+

Exercise 1.3 - Altering behavior

+
+ +
+
+

+ + Return to Workshop +

+ + + + + + + + + + + + +
+

Exercise Description

+
+
+

Let’s take a look at controlling SELinux behavior.

+
+
+
+
+

Exercise 1.3.1

+
+
+

Step 1: What mode are we in?

+
+

Next, let’s check to see what SELinux mode your host is in:

+
+
+
getenforce
+
+
+
+
Enforcing
+
+
+
+
+

Step 2: Changing modes

+
+

Now, we can change the mode that your host is in:

+
+
+
setenforce 0
+getenforce
+
+
+
+
Permissive
+
+
+
+

And we can change it back:

+
+
+
setenforce 1
+getenforce
+
+
+
+
Enforcing
+
+
+
+
+
+
+

Exercise 1.3.2

+
+
+

Booleans are if-then-else rules written in SELinux Policy. They are convenient "easy buttons" for customizing + the way that SELinux Policy rules effect a confined domain, and are designed with many real-world use cases in mind. For example, allowing httpd to serve files from users' home directories.

+
+
+

Step 1: List available booleans

+
+

To list all available booleans with a description of their purpose, use the semanage command:

+
+
+
semanage boolean -l
+
+
+
+
SELinux boolean                State  Default Description
+
+abrt_anon_write                (off  ,  off)  Allow ABRT to modify public files used for public file transfer services.
+abrt_handle_event              (off  ,  off)  Determine whether ABRT can run in the abrt_handle_event_t domain to handle ABRT event scripts.
+abrt_upload_watch_anon_write   (on   ,   on)  Determine whether abrt-handle-upload can modify public files used for public file transfer services in /var/spool/abrt-upload/.
+antivirus_can_scan_system      (off  ,  off)  Allow antivirus programs to read non security files on a system
+antivirus_use_jit              (off  ,  off)  Determine whether antivirus programs can use JIT compiler.
+...
+httpd_enable_homedirs          (off  ,  off)  Allow httpd to read home directories
+httpd_execmem                  (off  ,  off)  Allow httpd scripts and modules execmem/execstack
+httpd_graceful_shutdown        (off  ,  off)  Allow HTTPD to connect to port 80 for graceful shutdown
+httpd_manage_ipa               (off  ,  off)  Allow httpd processes to manage IPA content
+httpd_mod_auth_ntlm_winbind    (off  ,  off)  Allow Apache to use mod_auth_ntlm_winbind
+httpd_mod_auth_pam             (off  ,  off)  Allow Apache to use mod_auth_pam
+httpd_read_user_content        (off  ,  off)  Allow httpd to read user content
+...
+
+
+
+

Take a look at the list of booleans and you’ll see the breadth of options. Don’t worry, you don’t have to master all of these; there’s about 350 booleans available in RHEL 8!

+
+
+

An alternative way to list booleans, but without their descriptions, is:

+
+
+
getsebool -a
+
+
+
+

Step 2: Toggling booleans

+
+

Each boolean is easily toggled on or off. To temporarily toggle a boolean, you can enter:

+
+
+
setsebool httpd_enable_homedirs on
+
+
+

This setting allows the Apache web server to access user home directories. Used in conjunction with httpd_read_user_content, Apache can serve content from users' home directories.

+
+
+

To turn this off again, change 'on' to 'off':

+
+
+
setsebool httpd_enable_homedirs off
+
+
+

To toggle a boolean but make it persistent, use semanage instead of setsebool:

+
+
+
semanage boolean -m --on httpd_enable_homedirs
+
+
+

But how do you check if any booleans have been changed from their default? There’s an option for that!

+
+
+
semanage boolean -l -C
+
+
+
+
SELinux boolean                State  Default Description
+
+cups_execmem                   (on   ,   on)  Allow cups execmem/execstack
+virt_sandbox_use_all_caps      (on   ,   on)  Allow sandbox containers to use all capabilities
+virt_use_nfs                   (on   ,   on)  Allow confined virtual guests to manage nfs files
+
+
+
+ + + + + + + +
+

Workshop Details

+ + + + + + + + + + + + + + +
Domain + Red Hat Logo +
Workshop
Student ID
+ +
+ + + + +
+
+
+
+ + + + + + + + + + + + + +

+ + Return to Workshop +

+
+
+ + + + + diff --git a/workshops/selinux_policy/exercise1.4/index.html b/workshops/selinux_policy/exercise1.4/index.html new file mode 100644 index 000000000..b513e29a9 --- /dev/null +++ b/workshops/selinux_policy/exercise1.4/index.html @@ -0,0 +1,1043 @@ + + + + + + + + Exercise 1.4 - Troubleshooting | Red Hat | Public Sector + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+

Exercise 1.4 - Troubleshooting

+
+ +
+
+

+ + Return to Workshop +

+ + + + + + + + + + + + +
+

Exercise Description

+
+
+

Let’s look at some techniques for examing SELinux, as these are useful for troubleshooting. We’ll build on this in Section 2 of the workshop.

+
+
+

Step 1: Changing modes for specific domains

+
+

You can also set individual SELinux domains (like httpd_t, which controls web server access control) to permissve mode:

+
+
+
semanage permissive -a httpd_t
+semanage permissive -l
+
+
+
+
Builtin Permissive Types
+
+Customized Permissive Types
+
+httpd_t
+
+
+
+

And again, we can change it back:

+
+
+
semanage permissive -d httpd_t
+
+
+
+
libsemanage.semanage_direct_remove_key: Removing last permissive_httpd_t module (no other permissive_httpd_t module exists at another priority).
+
+
+
+

The permissive mode means that either the entire system (from the previous section) or the specific application constrained by a type (the second example) are allowed to bypass SELinux access controls. However, even though access controls are disabled, full AVC (access vector cache, where SELinux stores its decisions) logging still happens. This is useful for debugging a specific application without globally disabling SELinux.

+
+
+
+

Step 2: SELinux logging

+
+

SELinux messages are logged to the /var/log/audit/audit.log file. We can read the messages with this command:

+
+
+
ausearch -m MAC_POLICY_LOAD -i --just-one
+
+
+

We have asked the ausearch utility to look for SELinux policies being loaded (-m MAC_POLICY_LOAD), to make the result human-readable (-i), and to return only a single result (--just-one):

+
+
+
+
----
+type=PROCTITLE msg=audit(05/17/2019 23:47:54.147:1896) : proctitle=/sbin/load_policy
+type=SYSCALL msg=audit(05/17/2019 23:47:54.147:1896) : arch=x86_64 syscall=write success=yes exit=3857474 a0=0x4 a1=0x7fb57e597000 a2=0x3adc42 a3=0x7ffc8bb993a0 items=0 ppid=16567 pid=16572 auid=ec2-user uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 ses=1 comm=load_policy exe=/usr/sbin/load_policy subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)
+type=MAC_POLICY_LOAD msg=audit(05/17/2019 23:47:54.147:1896) : auid=ec2-user ses=1 lsm=selinux res=yes
+
+
+
+

Other useful searches include:

+
+
+
    +
  • +

    all denials:

    +
  • +
+
+
+
ausearch -m avc,user_avc,selinux_err,user_selinux_err
+
+
+
    +
  • +

    denials from today:

    +
  • +
+
+
+
ausearch -m avc -ts today
+
+
+
    +
  • +

    denials from the last 10 minutes:

    +
  • +
+
+
+
ausearch -m avc -ts recent
+
+
+

You can try these, if you like, but they may or may not return any results.

+
+
+
+

Step 3: Interpreting AVCs

+
+

If you use ausearch to find AVC messages, you can see exactly what caused SELinux to deny access:

+
+
+
ausearch -if ./testaudit -m AVC
+
+
+
+
----
+time->Mon Nov 17 00:45:36 2008
+type=SYSCALL msg=audit(1226882736.442:86): arch=40000003 syscall=196 success=no exit=-13 a0=b9a1e198 a1=bfc2921c a2=54dff4 a3=2008171 items=0 ppid=2425 pid=2427 auid=502 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=4 comm="httpd" exe="/usr/sbin/httpd" subj=unconfined_u:system_r:httpd_t:s0 key=(null)
+type=AVC msg=audit(1226882736.442:86): avc:  denied  { getattr } for  pid=2427 comm="httpd" path="/var/www/html/file1" dev=dm-0 ino=284133 scontext=unconfined_u:system_r:httpd_t:s0 tcontext=unconfined_u:object_r:samba_share_t:s0 tclass=file
+
+
+
+

Here, we can see that the httpd process, ID 2427, was disallowed from checking attributes of the file /var/www/html/file1. Additionally, we can see that the domain of the process was httpd_t, and the file was labeled with the samba_share_t context.

+
+
+
+

Step 4: Getting advice

+
+

There is a neat utility called audit2why, which can make suggestions as to how you might solve SELinux AVC messages. Let’s try it on our test error:

+
+
+
ausearch -if ./testaudit -m AVC | audit2why
+
+
+
+
type=AVC msg=audit(1226882736.442:86): avc:  denied  { getattr } for  pid=2427 comm="httpd" path="/var/www/html/file1" dev=dm-0 ino=284133 scontext=unconfined_u:system_r:httpd_t:s0 tcontext=unconfined_u:object_r:samba_share_t:s0 tclass=file
+
+	Was caused by:
+		Missing type enforcement (TE) allow rule.
+
+		You can use audit2allow to generate a loadable module to allow this access.
+
+
+
+

The audit2why utility is telling us that the problem was caused by a missing allow rule, which would grant access for httpd_t processes to samba_share_t files. This is obviously not the whole story, in this case, but it points us to the problem of the file’s context being incorrect.

+
+
+

audit2why will also tell you if a boolean is available to avoid a particular AVC error.

+
+
+

That’s all for the first half of the workshop. Go ahead an exit the root shell; the remainder of the workshop will be run as a regular user.

+
+
+
exit
+
+
+ + + + + + + +
+

Workshop Details

+ + + + + + + + + + + + + + +
Domain + Red Hat Logo +
Workshop
Student ID
+ +
+ + + + +
+
+
+
+ + + + + + + + + + + + + +

+ + Return to Workshop +

+
+
+ + + + + diff --git a/workshops/selinux_policy/exercise2.0/index.html b/workshops/selinux_policy/exercise2.0/index.html index d54a47d32..f3ef58a5d 100644 --- a/workshops/selinux_policy/exercise2.0/index.html +++ b/workshops/selinux_policy/exercise2.0/index.html @@ -303,7 +303,7 @@

Exercise 2.0 - Creating Custom SELinux Policy

@@ -324,42 +324,56 @@

Exercise Description

In this exercise, we are going to download the code for the example application that we are going to write policy for, and build and install it onto our test system.

-

Step 1: Change directories

+

Step 1: Exit root shell

+
+

If you haven’t already, exit the root shell we started in Section 1. Running whoami should not return root:

+
+
+
whoami
+
+
+
+
ec2-user
+
+
+
+
+

Step 2: Change directories

Create a src directory, in your home directory.

-
cd ~
-mkdir src
-cd src
+
cd ~
+mkdir src
+cd src
-

Step 2: Check out the source code to the example application from GitHub

+

Step 3: Check out the source code to the example application from GitHub

Download the latest code release

-
git clone https://github.com/ajacocks/selinuxlab.git
-cd selinuxlab
+
git clone https://github.com/ajacocks/selinuxlab.git
+cd selinuxlab
-

Step 3: Deploy the lab application, with Ansible

+

Step 4: Deploy the lab application, with Ansible

Now, use Ansible to deploy the test application

-
ansible-playbook setup-testapp.yml
+
ansible-playbook setup-testapp.yml
-

Step 4: Application and Service Info

+

Step 5: Application and Service Info

Take a look at the application, and the associated service, that you just installed

-
ls -l /usr/local/sbin/testapp
+
ls -l /usr/local/sbin/testapp
@@ -367,7 +381,7 @@

Step 4: Application and Service In

-
sudo systemctl status testapp
+
sudo systemctl status testapp
@@ -378,17 +392,16 @@

Step 4: Application and Service In

-

Step 5: Start and enable the service

+

Step 6: Start and enable the service

-

Now, let’s file up the application

+

Now, let’s fire up the application

-
sudo systemctl enable testapp
-sudo systemctl start testapp
+
sudo systemctl enable --now testapp

We can see that the app has been launched by systemd: -

sudo systemctl status testapp

+
sudo systemctl status testapp

@@ -405,7 +418,7 @@

Step 5: Start and enable the servi

And, we can also see that the app is running unconfined, which means that it is running without an SELinux policy, and can take any action that it wants to: -

ps -efZ | grep testapp | grep -v grep

+
ps -efZ | grep testapp | grep -v grep

@@ -512,7 +525,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -772,7 +785,7 @@


@@ -894,7 +907,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -958,7 +971,7 @@

Workshop Details

@@ -981,7 +994,7 @@

Workshop Details


@@ -964,7 +967,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1051,7 +1054,7 @@

Workshop Details


@@ -1063,7 +1086,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1149,7 +1172,7 @@

Workshop Details


@@ -1069,7 +1075,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1155,7 +1161,7 @@

Workshop Details


@@ -1155,7 +1152,7 @@

Workshop Details

Domain - Red Hat Logo + Red Hat Logo @@ -1202,6 +1199,7 @@

Workshop Details

+
@@ -1225,7 +1223,7 @@

Workshop Details

@@ -1241,7 +1239,7 @@

Workshop Details

+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+

Exercise 2.5 - Tips & Tricks

+
+ +
+
+

+ + Return to Workshop +

+ + + + + + + + + + + + +

Tips & tricks

+
+

This is the conclusion of the SELinux policy workshop. Here’s some closing tips to help you work with SELinux. +Please ask any questions that you have left, and thanks so much for coming!

+
+
+
    +
  • +

    Set a folder’s context to mimic another:

    +
  • +
+
+
+
+
mkdir -p /var/new_www/html
+matchpathcon /var/www/html /var/new_www/html
+semanage fcontext -a -e /var/www /var/new_www
+restorecon -Rv /var/
+
+
+
+
    +
  • +

    List ports associated with all service domains:

    +
  • +
+
+
+
+
semanage port -l
+
+
+
+

And then, add a port to an existing service’s domain, such as httpd:

+
+
+
+
semanage port -a -t http_port_t -p tcp 8888
+
+
+
+
    +
  • +

    Cause entire system to be re-labeled at next boot:

    +
  • +
+
+
+
+
fixfiles onboot
+
+
+
+

or

+
+
+
+
touch /.autorelabel
+
+
+
+
    +
  • +

    Get detail reports of access errors (requires optional setroubleshoot package):

    +
  • +
+
+
+
+
sealert -l "*"
+
+
+
+ + + + + + + +
+

Workshop Details

+ + + + + + + + + + + + + + +
Domain + Red Hat Logo +
Workshop
Student ID
+ +
+ + + + +
+ + + + + + + + + + + + + +

+ + Return to Workshop +

+
+
+ + + + + diff --git a/workshops/selinux_policy/index.html b/workshops/selinux_policy/index.html index 6aba60afe..5ccdba658 100644 --- a/workshops/selinux_policy/index.html +++ b/workshops/selinux_policy/index.html @@ -288,7 +288,7 @@

SELinux Policy Workshop

Workshop Description

-

Writing your own SELinux policies doesn’t have to be a terrifying prospect! This workshop will walk you through the process of creating a custom policy for a source-compiled application, using the advanced tooling present in Red Hat Enterprise Linux.

+

Writing your own SELinux policies doesn’t have to be a terrifying prospect! This workshop will walk you through the process of creating a custom policy for a source-compiled application, using the advanced tooling present in Red Hat Enterprise Linux.

@@ -341,7 +341,7 @@

What you will learn

Overview

-

The SELinux policy workshop is meant for anyone who needs to create application policies for applications that lack them. Some previous experience with SELinux is expected, but you don’t have to be a master. Also, knowledge of RHEL and general Linux functionality is required. We are going to start with a short overview and then we’ll get into the lab as soon as possible. That is where we will spend most of our time.

+

The SELinux policy workshop is meant for anyone who needs to create application policies for applications that lack them. Some previous experience with SELinux is expected, but you don’t have to be a master. Also, knowledge of RHEL and general Linux functionality is required. We are going to start with a short overview and then we’ll get into the lab as soon as possible. That is where we will spend most of our time.

@@ -355,32 +355,32 @@

Your Responsibilities

Participate. We are going to cut you loose with SELinux, in just a little while. Have questions. Have opinions.

-

Bring a laptop. It doesn’t matter what OS it runs, but you will need either the Firefox or Chrome web browser installed. If, for some reason, you don’t have a laptop, let your instructor know, or try to find someone to share with.

+

Bring a laptop. It doesn’t matter what OS it runs, but you will need either the Firefox or Chrome web browser installed. If, for some reason, you don’t have a laptop, let your instructor know, or try to find someone to share with.

- + -
-

When we want you to type something in, we’ll use a frame like this: -

cat /etc/hosts

+

When we want you to type something in, we’ll use a frame like this: +

cat /etc/hosts

+
- + -
-

When we want to show you the output from a command, we’ll use a different frame, like this one:

+

When we want to show you the output from a command, we’ll use a different frame, like this one:

@@ -390,7 +390,7 @@

Your Responsibilities

+
@@ -416,7 +416,7 @@

Exercises

@@ -426,6 +426,18 @@

Exercises

+ + + + + +