Musselman Development

SELinux (Security-Enhanced Linux) is an integral part of maintaining system security, especially in sensitive cloud and enterprise environments. It provides fine-grained access control policies through mandatory access controls, enforcing rules that protect users and processes from unauthorized access. It is a extension of the everyday Linux Kernel.

If SELinux seems confusing at first glance, don’t worry. Understanding it is like learning the intricacies of an exclusive club with strict entry protocols. This article will break down the basics and provide a practical guide to help you get started.

This article is a follow-up to my previous posts (see blog post automation and switching to a simpler web server), I wanted to make setting up all my services easier. One of the problems I have been thoroughly tackling is the amount of steps it takes to set up a service. Even though the steps to set up a service were vastly decreased when I switched to Caddy, there was still room for simplification and automation. Most of what I was left doing could easily be transformed into a series of templates as there were only small changes between each item. Below are the changes I made to enable this and the current iteration of the script I use to deploy a new service.

Today was a long day. On days like these I seek out something that I find meditative to work on. More often than not I gravitate towards improving my self-hosted infrastructure. One pain point I have always had was the many moving parts that I had to run manually when setting up a new service. Today I decided I have had enough of the hassle and did something about it.