beginner to SE Linux policy
Daniel J Walsh
dwalsh at redhat.com
Sat Aug 11 11:23:51 UTC 2007
Mark wrote:
> Thanks for the help. I just want to become more familiar with SE
> Linux and understand the context of the te, fe, if..etc files and how
> I can modify them so that my programs are more secure. There just
> seems to be alot of information that may or may not be related in
> order to help me. For instance, there is the seedit tools, SLIDE and
> RedHat tools available. Also, which is a better distribution to learn
> SE Linux, CentOS or Fedora Core?
>
> I am an application developer who really just needs to learn how to
> write policies for the programs I am developing. Things like
> policies, domains and domain transition are important areas I really
> want to learn.
>
> Thanks for the help.
>
> PS. I ordered the SE Linux by Example yesterday!
> --
> ..Cheers
> Mark
You might want to try system-config-selinux/polgengui to build you a
policy template.
>
> On 7/28/07, *shahbaz khan* <shazalive at gmail.com
> <mailto:shazalive at gmail.com>> wrote:
>
> Mark
>
> Selinux by example is the best answer to ur stated problem. NSA
> documents will give u a good background because things have been
> changing alot. Do not miss tresys' reference policy and policy
> managemnt server. U can get more info about it from tresys'
> website. Once u start to get aquainted with selinux this mailing
> list will be more useful to u. Also join fedora selinux mailing list.
>
> I am not sure which policy analysis tool will be more useful to u.
> Why dont u right a more specific question to this list w.r.t.
> policy analysis tools. U might get good answers from selinux by
> example.
>
> Shaz.
>
>
>
>
> On 7/28/07, *Mark* <elihusmails at gmail.com
> <mailto:elihusmails at gmail.com>> wrote:
>
> I have seen programs that will help me to edit and analyze SE
> Linux policies. What I am interested in is a resource that
> will help me understand what a policy does and how to write
> them. At least for me, learning at the code level and not
> using GUI tools helps me to understand things better.
>
> So what resources are out there for me to start looking at?
>
> Thanks in advance.
> Mark
>
>
>
> ------------------------------------------------------------------------
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
More information about the selinux
mailing list