Let's talk about the different SELinux components.
As we have already seen, SELinux works with context labels.
And context labels define specific permissions.
They are applied to source objects and target objects.
So source objects are users, processes.
And target objects are mainly files and directories.
But they can also be ports.
The SELinux policy has many rules
to define which source context has access
to which target context.
And very important to remember, default access
is always allowed by default.
To manage SELinux, you need to apply context management.
So context management is about applying context
to mostly files, directories, and ports.
And in order to make it working, you
will need to apply a context that matches a specific rule.
There are also Booleans.
Booleans allow parts of the SELinux policy
to be rewritten to allow or disallow
specific functionality in an easy way.
In the next video, I'll show you how
to work with these context labels.