Miroslav Grepl wrote:
> New article on
opensource.com describing SELinux enforcement in
simple
> terms.
> Check it out.
>
>
http://opensource.com/business/13/11/selinux-policy-guide
I believe it is a great introduction to SELinux.
I liked this.
I also liked the video
<
http://www.youtube.com/watch?v=MxjenQ31b70>
with accompanying slides at
<
http://people.redhat.com/tcameron/summit2010/selinux/SELinuxMereMortals.p...;.
I thought I'd try to move from SELinux permissive mode
following the advice in this video and slides.
The main problem I met was following sealert advice of the form
-----------------------------
If you want to allow perl to have search access on the tim directory
Then you need to change the label on /home/tim
Do
# semanage fcontext -a -t FILE_TYPE '/home/tim'
where FILE_TYPE is one of the following: etc_t, proc_t, sysfs_t,
setrans_var_run_t, sssd_public_t, etc_mail_t, postgresql_tmp_t, sysctl_t,
abrt_t, bin_t, likewise_var_lib_t, postfix_etc_t, lib_t, mnt_t, root_t,
device_t, tmp_t, usr_t, var_t, etc_t, udev_tbl_t, proc_t, krb5_conf_t,
spamass_milter_state_t, var_lib_t, var_run_t, spamd_tmp_t, var_spool_t,
dcc_var_t, spamd_compiled_t, spamd_etc_t, spamd_log_t, var_lib_t, var_run_t,
rpm_script_tmp_t, configfile, proc_net_t, abrt_var_run_t, security_t,
var_log_t, samba_var_t, spamc_home_t, default_t, amavis_var_lib_t,
avahi_var_run_t, cert_type, dirsrv_var_run_t, mysqld_var_run_t, rpm_tmp_t,
net_conf_t, abrt_var_cache_t, clamd_var_run_t, var_run_t,
httpd_sys_content_t, nscd_var_run_t, nslcd_var_run_t, slapd_var_run_t,
configfile, spamd_var_lib_t, spamd_var_run_t, sssd_var_lib_t,
cfengine_var_lib_t, rpm_log_t, sysctl_kernel_t, home_root_t, abrt_var_run_t,
spamd_spool_t, mysqld_db_t, postgresql_var_run_t, tmp_t, var_t,
exim_spool_t, sysctl_crypto_t, user_home_dir_t, sysctl_t, bin_t,
winbind_var_run_t, mail_spool_t, logfile, spamd_t, sysctl_type, autofs_t,
device_t, devpts_t, tmp_t, usr_t, locale_t, var_t, nfs_t, sysctl_t, bin_t,
proc_t, var_lib_t, var_run_t, user_home_t, var_run_t, var_run_t,
spamc_home_t, nscd_var_run_t, pcscd_var_run_t, cluster_pid, home_root_t,
cluster_var_lib_t, cluster_var_run_t, root_t, sysctl_kernel_t, device_t,
devpts_t, var_t, user_home_dir_t, cluster_conf_t, var_t, var_t.
-----------------------------
--
Timothy Murphy
e-mail: gayleard /at/
eircom.net
School of Mathematics, Trinity College, Dublin 2, Ireland