Thanks for the help. I just want to become more familiar with SE Linux and understand the context of the te, fe, if..etc files and how I can modify them so that my programs are more secure. There just seems to be alot of information that may or may not be related in order to help me. For instance, there is the seedit tools, SLIDE and RedHat tools available. Also, which is a better distribution to learn SE Linux, CentOS or Fedora Core?
I am an application developer who really just needs to learn how to write policies for the programs I am developing. Things like policies, domains and domain transition are important areas I really want to learn.
Thanks for the help.
PS. I ordered the SE Linux by Example yesterday!
On Tue, 2007-08-07 at 13:56 -0400, Mark wrote:
Thanks for the help. I just want to become more familiar with SE Linux and understand the context of the te, fe, if..etc files and how I can modify them so that my programs are more secure. There just seems to be alot of information that may or may not be related in order to help me. For instance, there is the seedit tools, SLIDE and RedHat tools available. Also, which is a better distribution to learn SE Linux, CentOS or Fedora Core?
Fedora Core tracks the latest SELinux developments more closely.
The reference policy documentation should help you, online at http://oss.tresys.com/projects/refpolicy/wiki/Documentation and if you have selinux-policy installed, locally available docs under /usr/share/doc/selinux-policy-x.y.z/.
SLIDE is an eclipse plugin that leverages reference policy and provides the typical IDE-style auto-completion, interface lookup, wizards for constructing domains, etc. Useful if you are ok working in an IDE.
SEEdit is more about hiding the underlying abstractions and presenting a very simple UI. Requires switching to its own policy entirely, away from the stock policy.
I am an application developer who really just needs to learn how to write policies for the programs I am developing. Things like policies, domains and domain transition are important areas I really want to learn.
There are a number of resources, e.g. see http://selinux.sourceforge.net/resources.php3 , but many of them predate the reference policy. Reference policy documentation and SLIDE are your best bets right now, along with the book.
Thank you for the information. I will continue working with the reference policy and reading the information you provided.
Mark wrote:
Thanks for the help. I just want to become more familiar with SE Linux and understand the context of the te, fe, if..etc files and how I can modify them so that my programs are more secure. There just seems to be alot of information that may or may not be related in order to help me. For instance, there is the seedit tools, SLIDE and RedHat tools available. Also, which is a better distribution to learn SE Linux, CentOS or Fedora Core?
I am an application developer who really just needs to learn how to write policies for the programs I am developing. Things like policies, domains and domain transition are important areas I really want to learn.
Thanks for the help.
PS. I ordered the SE Linux by Example yesterday!
..Cheers Mark
You might want to try system-config-selinux/polgengui to build you a policy template.
On 7/28/07, *shahbaz khan* <shazalive@gmail.com mailto:shazalive@gmail.com> wrote:
Mark Selinux by example is the best answer to ur stated problem. NSA documents will give u a good background because things have been changing alot. Do not miss tresys' reference policy and policy managemnt server. U can get more info about it from tresys' website. Once u start to get aquainted with selinux this mailing list will be more useful to u. Also join fedora selinux mailing list. I am not sure which policy analysis tool will be more useful to u. Why dont u right a more specific question to this list w.r.t. policy analysis tools. U might get good answers from selinux by example. Shaz. On 7/28/07, *Mark* <elihusmails@gmail.com <mailto:elihusmails@gmail.com>> wrote: I have seen programs that will help me to edit and analyze SE Linux policies. What I am interested in is a resource that will help me understand what a policy does and how to write them. At least for me, learning at the code level and not using GUI tools helps me to understand things better. So what resources are out there for me to start looking at? Thanks in advance. Mark
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
selinux@lists.fedoraproject.org