Image by jodylehigh @ Pixabay
Defaults Are Great
Everybody loves defaults. Add some more defaults to your file systems!
|
|
What it does
It labels the root of your file system with the SELinux type default_t
.
Why it works
Not much is allowed to read (or execute through) files and directories labeled
default_t
, since that’s the placeholder for unlabeled files. Most services
will fail to start as a result.
TL;DR
- Properly labeled file systems
- Fun