Managing SELinux in the Enterprise

Daniel Walsh

How do you manage SELinux in a large environment? Set up alternative labelling? Turn on booleans? Monitor setroubleshoot logs? Install custom policy modules?

In this session, Daniel Walsh will explain how you can configure your local machine and export its content to multiple machines, using tools like Red Hat Satellite, RPM, Puppet, and Ansible. He will also explain how to:

• Configure SELinux out of the box using Kickstart
• Set up an MLS/LSPP system
• Configure SELinux-confined users using IDM/FreeIPA and standard LDAP
• Set up SELinux infrastructure within your environment
• Set up reporting tools