List and identify SELinux/AppArmor file and process contexts

Segun is a RHEL Sysadmin at Red Hat:

• His RHEL Server: RHEL_Server_060
• His username: segun.o
• His certs: LFCS, RHCSA
• His preference: never run commands as root
• His task: teach a class of interns this LFCS objective:  List and identify SELinux/AppArmor file and process contexts.

His is going to teach them on his RHEL system. Please generate and explain sample commands that Segun can teach the class.

Certainly! Here are some sample commands that Segun can teach the interns to list and identify SELinux and AppArmor file and process contexts:

1. Checking SELinux status:

   • sestatus
   • This command displays the current status of SELinux on the system. It provides information on whether SELinux is enabled, enforcing, or permissive.
2. Listing SELinux file contexts:
   • ls -Z /path/to/file
   • This command lists the SELinux security contexts of a specific file or directory. It displays the SELinux context alongside the file's other attributes, such as permissions and ownership.
3. Identifying SELinux context of a process:
   • ps -eZ | grep process_name
   • This command lists all running processes along with their associated SELinux security contexts. By using grep, you can filter the output for a specific process name.
4. Displaying SELinux context of a file:
   • stat -c %C /path/to/file
   • This command displays the SELinux context of a file in a human-readable format. It provides detailed information about the SELinux context associated with the file.
5. Checking AppArmor status:
   • apparmor_status
   • This command provides a summary of the current AppArmor security profiles and their enforcement status. It shows which profiles are loaded and whether they are enforced.
6. Listing AppArmor profiles for a process:
   • aa-status --process process_name
   • This command lists the AppArmor profiles associated with a specific process. It helps identify the AppArmor profiles that are in effect for a given process.
7. Identifying AppArmor context of a file:
   • aa-status --file /path/to/file
   • This command displays the AppArmor context of a file. It shows which AppArmor profiles are applicable to the specified file.

These commands will help the interns understand how to work with SELinux and AppArmor in a RHEL environment. Segun can explain the purpose of each command and guide the interns in identifying and managing file and process contexts for enhanced security.