Hands-on Activities about SELinux and ACL

1. Log into CentOS VM in VCL. 2. Read SELinux configuration file. What is the value of SELINUXTYPE? What does it mean? 3. Do you know how to check the mode that SELinux is running? Which mode your CentOS is set by default? Is it good for hardening security measures? 4. View current ACL permission of the wheel group for the log file. What is it? 5. Add read ACL permissions to the wheel group for the log file and verify it is set properly. 6. Add write ACL permissions to the wheel group for the log file and verify it is set properly. 7. Remove all of ACL permissions to the wheel group for the log file and verify it is set properly. Hint: The command you may need for this lab: cat /etc/selinux/config /usr/sbin/sestatus getfacl /var/log/messages setfacl m g:wheel:r /var/log/messages setfacl m g:wheel:--- /var/log/messages