Thank you for the information. I will continue working with the reference policy and reading the information you provided.<br><br clear="all"><br>-- <br>..Cheers<br>Mark
<br><br><div><span class="gmail_quote">On 8/7/07, <b class="gmail_sendername">Stephen Smalley</b> <<a href="mailto:sds@tycho.nsa.gov">sds@tycho.nsa.gov</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
On Tue, 2007-08-07 at 13:56 -0400, Mark wrote:<br>> Thanks for the help. I just want to become more familiar with SE<br>> Linux and understand the context of the te, fe, if..etc files and how<br>> I can modify them so that my programs are more secure. There just
<br>> seems to be alot of information that may or may not be related in<br>> order to help me. For instance, there is the seedit tools, SLIDE and<br>> RedHat tools available. Also, which is a better distribution to learn
<br>> SE Linux, CentOS or Fedora Core?<br><br>Fedora Core tracks the latest SELinux developments more closely.<br><br>The reference policy documentation should help you, online at<br><a href="http://oss.tresys.com/projects/refpolicy/wiki/Documentation">
http://oss.tresys.com/projects/refpolicy/wiki/Documentation</a> and if you<br>have selinux-policy installed, locally available docs<br>under /usr/share/doc/selinux-policy-x.y.z/.<br><br>SLIDE is an eclipse plugin that leverages reference policy and provides
<br>the typical IDE-style auto-completion, interface lookup, wizards for<br>constructing domains, etc. Useful if you are ok working in an IDE.<br><br>SEEdit is more about hiding the underlying abstractions and presenting a
<br>very simple UI. Requires switching to its own policy entirely, away<br>from the stock policy.<br><br>> I am an application developer who really just needs to learn how to<br>> write policies for the programs I am developing. Things like
<br>> policies, domains and domain transition are important areas I really<br>> want to learn.<br><br>There are a number of resources, e.g. see<br><a href="http://selinux.sourceforge.net/resources.php3">http://selinux.sourceforge.net/resources.php3
</a> , but many of them predate<br>the reference policy. Reference policy documentation and SLIDE are your<br>best bets right now, along with the book.<br><br>--<br>Stephen Smalley<br>National Security Agency<br><br></blockquote>
</div><br>