setenforce 0 is not a solution: a survival guide to living with SELinux

Note: please fill out this simple form in advance of attending the meeting to allow for smoother flow at the front door, and help us with organizing this and upcoming events. Thank you!

Abstract:
`setenforce 0` is the most common SELinux advice on the internet, and (even though we all do it) it's terrible advice. This talk is for everyone who has disabled SELinux to make something work, with every intention of coming back later to do it right.

We'll cover what SELinux actually does, how to read a denial, and the three commands that solve about 90 percent of what you'll ever hit. Using real-ish examples (a service that can't see its files, a container that can't write) you'll walk away with a simple workflow and the mental model you need to work with selinux on a daily basis. You came in reaching for a sledgehammer; you'll leave with a scalpel.
( Note: this talk assumes you're already comfortable on the Linux command line and know nothing special about SELinux...yet )

Speaker Bio:
benny Vasquez is the Chair of the AlmaLinux OS Foundation. After many years as a sysadmin, community builder, and all-around open source geek (with a lifelong soft spot for Star Wars and sci-fi), benny now spends most days talking with the people who build and run AlmaLinux in production and at home.
Say hi at @bennyvasquez almost everywhere, or benny [at] almalinux [dot] org

Timing:
7:00--7:45 Social Session
7:45--8:00 Announcements & Introductions
8:00-ish Presentation