Is there a SELinux tutorial for ISVs ?

[Stephen Smalley]

On Wed, 2005-04-27 at 14:53 +0200, Davide Bolcioni wrote:
> Greetings,
> I was looking for directions about how would an ISV rool own policy for
> the packages it ships. A very basic and step-by-step tutorial, for tiny
> minds :-)

Nothing quite fits the bill as you describe it, but nonetheless have a
look at the links under 'Documentation' at:
http://selinux.sourceforge.net/resources.php3

In particular:
1) There are some (outdated) HOWTOs on the sourceforge site,
http://sourceforge.net/docman/?group_id=21266

2) There is a RHEL4 SELinux Guide,
http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/selinux-guide/

3) There is a NSA technical report,
http://www.nsa.gov/selinux/papers/policy2/t1.html

4) There is a published book,
http://www.oreilly.com/catalog/selinux/

5) There is a course,
http://www.tresys.com/selinux/selinux-course-outline.html

Of course, as others have noted, we don't yet have the infrastructure in
place for distributing package policies effectively.  Binary policy
module support should be in FC5 (not FC4).

-- 
Stephen Smalley <sds at tycho.nsa.gov>
National Security Agency