selinux – ITFROMZERO – Share tobe shared!

Production-Ready KVM/QEMU Setup on CentOS Stream 9: Bridge Network, SELinux, and firewalld Done Right

By admin June 30, 2026

A default KVM setup is easy — but production requires more. This article focuses on three commonly overlooked areas: bridge networking with nmcli instead of the default NAT, proper SELinux context configuration instead of disabling it, and firewalld FORWARD rules to get VM traffic working. Includes remote Virt-Manager management over SSH and troubleshooting common errors.

Centos

HAProxy Layer 7 Load Balancer on CentOS Stream 9: Installation, Configuration, and Backend Health Checks

By admin June 30, 2026

A practical guide to installing HAProxy as a Layer 7 load balancer on CentOS Stream 9, covering SELinux boolean configuration, firewalld setup, backend health checks, and real-time monitoring via the Stats page. Includes a complete configuration example and a real-world failover test scenario.

Fedora

Setting Up Samba Server on Fedora: Secure File Sharing with Windows Using SELinux and firewalld

By admin June 28, 2026

A comparison of Samba, NFS, and SFTP to help you choose the right file sharing option for a Linux-Windows environment. Focuses on installing Samba on Fedora and correctly handling SELinux contexts, booleans, and firewalld to avoid silent Permission denied errors.

Fedora

Setting Up WireGuard VPN on Fedora Server: Secure Remote Access with firewalld and SELinux

By admin June 16, 2026

A complete guide to setting up WireGuard VPN on Fedora Server, covering firewalld, SELinux, and IP forwarding configuration. Includes a script to auto-generate client configs and practical debugging tips.

Fedora

Deploying PostgreSQL on Fedora Server: Securing with SELinux and Firewalld

By admin June 14, 2026

A guide to installing production-ready PostgreSQL on Fedora Server. Focuses on SELinux security, Firewalld configuration, and performance optimization tips from real-world experience.

Fedora

Installing and Configuring MariaDB on Fedora Server: Production Database Deployment with SELinux and firewalld

By admin May 22, 2026

A complete guide to getting MariaDB production-ready on Fedora Server: securing the installation with mysql_secure_installation, opening ports correctly with firewalld rich rules, handling SELinux context for custom datadirs, and debugging refused connections. Includes basic performance tuning and a final production checklist.

Centos

How to Install and Configure a Secure FTP Server with vsftpd on CentOS Stream 9: SSL/TLS and Virtual Users

By admin April 25, 2026

A guide to installing vsftpd on CentOS Stream 9 with SSL/TLS (FTPS) and virtual users — completely isolating FTP accounts from system accounts. Includes detailed PAM, firewalld, and SELinux configuration based on real deployment experience.

Security

Mastering SELinux Custom Policies: Don’t Disable Security Just Because of ‘Permission Denied’

By admin April 5, 2026

Don't disable SELinux just because of a Permission Denied error. Learn how to create Custom Policies to protect Linux servers using the Principle of Least Privilege.

Centos

Configuring SELinux on Rocky Linux: Don’t Disable It Before You Understand What It Does

By admin March 6, 2026

From firsthand experience migrating 5 servers off CentOS 8 EOL to Rocky Linux, this guide covers how to configure SELinux properly — from Permissive for debugging to Enforcing on production — with practical audit2allow, sealert, and semanage examples.

Fedora

Configuring SELinux on Fedora: From Enforcing Mode to Custom Policies for Your Application

By admin March 1, 2026

SELinux on Fedora is often disabled the moment it causes the first error — but doing so removes the most important security layer. This guide walks you through debugging denial logs, fixing file contexts, leveraging built-in booleans, and creating custom policies with audit2allow so your app runs correctly and your server stays secure.