I found that this talk (selinux for mere mortals) was good for me to start off - https://www.youtube.com/watch?v=cNoVgDqqJmM

After that, Red Hat's documentation was probably the next most useful thing for getting started; https://access.redhat.com/documentation/en-US/Red_Hat_Enterp...

But mostly it was a lot of proding and poking whilst setting various things up that helped a lot, and remembering that when something doesn't work, to check selinux first.

The 'settroubleshoot-server' package for the Red Hat based distributions is also good whilst you're getting started in dev, as it takes the avc logs and 'guesses' what the likely cause of the problems you've had are, giving percentage likelihoods of the policies and booleans that might be causing problems.

When I started using Linux very heavily for a lot of things, nothing really clicked until I started paying real attention to logging.

If you configuring logging correctly -- or just be aware of it, really, you can always optimize later -- you are no longer SysAdmin-ing blind.

Nice!

Packages, troubleshooting tools, practical tips and names of stuff (avc logs).

Try the selinux coloring book https://people.redhat.com/duffy/selinux/selinux-coloring-boo...

Hehe, still looking for a walk through of what commands exist, in what order are they typically used, basically a couple of more annotated sessions. Preferably text although I have managed to get through a few videos lately.

I prefer AppArmor myself, you should def evaluate it before going down the SELinux route.