[Bug 1180524] New: confining users section unclear

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1180524

Bug ID: 1180524
           Summary: confining users section unclear
           Product: Fedora Documentation
           Version: devel
         Component: selinux-user-guide
          Assignee: [e-mail]
          Reporter: [e-mail]
        QA Contact: [e-mail]
                CC: [e-mail], [e-mail],
                    [e-mail]

The section 6 (confining users) in Fedora 21 documentation of SELinux is very
unclear.

1. What does confining mean actually? How are they confined? What capabilities
these user lose? These are crucial information, never discussed in the text.

2. In fedora with "seinfo -u" I see several selinux users. These, along with
the limitation each has, are never discussed.

3. "6.5. xguest: Kiosk Mode": I miss some technical info on the restrictions of
the xguest account. What that user can't do and what can it do. Without that
information the text could just say, trust us we've done everything for you
(nothing bad with it, except that in technical documentation you expect more).

4. I miss a "confining a server process/app" section. This is a very common
usage for selinux but no information is provided about that at all. Can I put
some server in a confined state, as the documentation discusses with the user?
Do we provide some preconfigured selinux users, roles, types for that purpose?
What about the sandbox tool we ship? That would be the information I'd expect
from such a section.

[Bug 1180524] confining users section unclear

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1180524

Nikos Mavrogiannopoulos  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]
              Flags|                            |needinfo?(bancinco@redhat.c
                   |                            |om)

--- Comment #1 from Nikos Mavrogiannopoulos  ---
When this will be addressed?

[Bug 1180524] confining users section unclear

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1180524

Barbora Ancincova  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
              Flags|needinfo?(bancinco@redhat.c |
                   |om)                         |

--- Comment #2 from Barbora Ancincova  ---
Hi Nikos,

sorry for the delay. I started working on a different project and even though I
still maintain Red Hat SELinux docs (and also Fedora docs) the other project
has higher priority. However, since you escalated this I do my best to address
this issue as soon as possible.

Bara

[Bug 1180524] confining users section unclear

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1180524

--- Comment #3 from Nikos Mavrogiannopoulos  ---
Thank you Barbora.