Hardening Linux : A Triple-Threat Approach with SELinux, Fapolicyd, and Auditd
- Speaker: Joshua Loscar
- Room: CC 202
- Time: Sun 2:00 pm – 3:30 pm
- Format: Hands-on Lab (90 min)
- Difficulty: Introductory
- Track: Security / Privacy
- Additional Tags: DevOps, Self-Hosting
- Presenter Location: In-person
- Experience: first time speaking / several-th time speaking
- At: anywhere / at lfnw
Description:
In an era of increasingly sophisticated cyber threats, securing Linux systems is more important than ever. This hands‑on lab introduces a triple‑threat approach to Linux hardening using three foundational security tools:
- SELinux — Implements Mandatory Access Control (MAC) to enforce strict policy‑based access
- Fapolicyd — A user‑space daemon that enhances file access control and prevents unauthorized execution
- Auditd — Logs and monitors system calls and user activity for visibility and compliance
Participants will learn how these tools complement each other to form a comprehensive security strategy. The lab covers installation, configuration, and practical usage, showing how to:
- Build a strong security foundation for Linux infrastructure
- Meet compliance requirements (C