tools that present a graphical abstraction of a SELinux policy

[Christian Lange]

Hi,

I'm a student of the university of Rostock, In the scope of my master
thesis I want to get an
overview about existing graphical tools (commercial or free),
abstracting from underlying SELinux
details, helping users to define and maintain SELinux policies (TE &
MCS). So far, I found the
following tools:
 - SLIDE
 - VIRGIL
 - Tresys Brickwall Security Suite
They only use masks for data input and don't abstract from the policy
to show a graph.

My questions are:
 - Is there any tool that creates a abstract view of a policy as a
graph or something like that?
 - Is there any demand for such a tool?

Thanks in advance

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Christian Lange wrote:
| Hi,
|
| I'm a student of the university of Rostock, In the scope of my master
| thesis I want to get an
| overview about existing graphical tools (commercial or free),
| abstracting from underlying SELinux
| details, helping users to define and maintain SELinux policies (TE &
| MCS). So far, I found the
| following tools:
|  - SLIDE
|  - VIRGIL
|  - Tresys Brickwall Security Suite
| They only use masks for data input and don't abstract from the policy
| to show a graph.
|
| My questions are:
|  - Is there any tool that creates a abstract view of a policy as a
| graph or something like that?
|  - Is there any demand for such a tool?
|
| Thanks in advance
|
| --
| fedora-selinux-list mailing list
| fedora-selinux-list(a)redhat.com
| https://www.redhat.com/mailman/listinfo/fedora-selinux-list
I have no idea,  What do you think the graph would show?    Please
explain your ideas.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkgteFEACgkQrlYvE4MpobM3LQCgtn9wg0GYMWVBx89s6gBhaG1Z
> vL4AnijlN6lHsKE0/BhYkZx9L+1j1Fnc
> =065Y
> -----END PGP SIGNATURE-----

[Stephen Smalley]

On Fri, 2008-05-16 at 08:28 +0200, Christian Lange wrote:
>  Hi,
>  
>  I'm a student of the university of Rostock, In the scope of my master
>  thesis I want to get an
>  overview about existing graphical tools (commercial or free),
>  abstracting from underlying SELinux
>  details, helping users to define and maintain SELinux policies (TE &
>  MCS). So far, I found the
>  following tools:
>   - SLIDE
>   - VIRGIL
>   - Tresys Brickwall Security Suite
>  They only use masks for data input and don't abstract from the policy
>  to show a graph.
>  
>  My questions are:
>   - Is there any tool that creates a abstract view of a policy as a
>  graph or something like that?
>   - Is there any demand for such a tool? 
Your question is better suited to the upstream selinux(a)tycho.nsa.gov
mailing list than to this list, as it is not specific to Fedora.
However, let me point you to this resource:
http://selinuxproject.org/page/User_Resources#Tools

In particular, the Cross Domain Solution Framework is graph-oriented,
http://oss.tresys.com/projects/cdsframework

-- 
Stephen Smalley
National Security Agency