Selinux

Now available under an open-source license, SELinux is a Linux kernel module and a set of Linux programs originally developed by the National Security Agency (NSA). SELinux helps protect a computer running Linux from attack by extending the Linux authorization and permissions facilities, so that even if an attacker manages to cause a program to misbehave, the attacker gains only a handful of capabilities. This guide focuses on instructions for performing simple policy customizations of the sort that system administrators occasionally need to perform. Most Linux users already have the knowledge and skills necessary to learn SELinux with this book.

Bill McCarty is a Professor of Information Technology at Azusa Pacific University, Azusa, California. Bill is also the author of over fifteen technical books and numerous papers and presentations. He serves as editor of the Honeynet Files department of the journal IEEE Security and Privacy, and directs the Azusa Pacific University Honeynet Research Project, which is affiliated with the Honeynet Project's Honeynet Research Alliance. Bill has briefed members of US organizations such as the CIA, DISA, FBI, NASA, and NSA, and non-US organizations such as the UK's CESG and GHQ, on his honeynet research. He has worked with the FBI to prevent and detect computer crimes.

Preface	p. ix
Introducing SELinux	p. 1
Software Threats and the Internet	p. 1
SELinux Features	p. 12
Applications of SELinux	p. 14
SELinux History	p. 16
Web and FTP Sites	p. 17
Overview of the SELinux Security Model	p. 19
Subjects and Objects	p. 19
Security Contexts	p. 23
Transient and Persistent Objects	p. 25
Access Decisions	p. 26
Transition Decisions	p. 28
SELinux Architecture	p. 31
Installing and Initially Configuring SELinux	p. 38
SELinux Versions	p. 38
Installing SELinux	p. 39
Linux Distributions Supporting SELinux	p. 40
Installation Overview	p. 42
Installing SELinux from Binary or Source Packages	p. 43
Installing from Source	p. 61
Using and Administering SELinux	p. 62
System Modes and SELinux Tuning	p. 63
Controlling SELinux	p. 64
Routine SELinux System Use and Administration	p. 78
Monitoring SELinux	p. 87
Troubleshooting SELinux	p. 91
SELinux Policy and Policy Language Overview	p. 95
The SELinux Policy	p. 95
Two Forms of an SELinux Policy	p. 96
Anatomy of a Simple SELinux Policy Domain	p. 99
SELinux Policy Structure	p. 104
Role-Based Access Control	p. 115
The SELinux Role-Based Access Control Model	p. 115
Railroad Diagrams	p. 117
SELinux Policy Syntax	p. 122
User Declarations	p. 126
Role-Based Access Control Declarations	p. 127
Type Enforcement	p. 130
The SELinux Type-Enforcement Model	p. 130
Review of SELinux Policy Syntax	p. 131
Type-Enforcement Declarations	p. 132
Examining a Sample Policy	p. 145
Ancillary Policy Statements	p. 150
Constraint Declarations	p. 150
Other Context-Related Declarations	p. 154
Flask-Related Declarations	p. 159
Customizing SELinux Policies	p. 163
The SELinux Policy Source Tree	p. 163
On the Topics of Difficulty and Discretion	p. 165
Using the SELinux Makefile	p. 165
Creating an SELinux User	p. 166
Customizing Roles	p. 167
Adding Permissions	p. 168
Allowing a User Access to an Existing Domain	p. 172
Creating a New Domain	p. 173
Using Audit2allow	p. 181
Policy Management Tools	p. 186
The Road Ahead	p. 197
Security Object Classes	p. 199
SELinux Operations	p. 201
SELinux Macros Defined in src/policy/macros	p. 209
SELinux General Types	p. 214
SELinux Type Attributes	p. 220
Index	p. 223
Table of Contents provided by Ingram. All Rights Reserved.

What is included with this book?

The New copy of this book will include any supplemental materials advertised. Please check the title of the book to determine if it should include any access cards, study guides, lab manuals, CDs, etc.

The Used, Rental and eBook copies of this book are not guaranteed to include any supplemental materials. Typically, only the book itself is included. This is true even if the title states it includes any access cards, study guides, lab manuals, CDs, etc.

FREE SHIPPING

Amazon no longer offers textbook rentals. We do!

Summary

Author Biography

Table of Contents

Supplemental Materials