LinuxCon + CloudOpen + ContainerCon NA 2015

Don't be afraid! Sure, security-enhanced Linux (SELinux) has a reputation of being hard. It is often turned off as when deploying a major application. But SELinux is an important piece of a complete security strategy. It is used to prevent accidental information leak from servers, contain intruders during 0day attacks, and isolate tenants in technologies such as sVirt, Docker, and OpenShift. Today, with default policies, enhanced tools, and behind the scenes automation, it easier than ever to leave SELinux turned on and protecting the system.

Attendees will learn the basics of the SELinux type enforcement and categories, look at real world examples where SElinux is already (and automatically) protecting your system, and view contexts, interpret log files, and make simple changes to file context and booleans. Coloring books will be available. [Maybe you should be afraid after all.]