SELinux by Example: Using Security Enhanced Linux - page 1
- 1
- 2
- SELinux by Example: Using Security Enhanced Linux
- SELinux by Example: Using Security Enhanced Linux
- Table of Contents
- Copyright
- Prentice Hall Open Source Software Development Series
- Acknowledgments
- About the Authors
- Preface
- Part I: SELinux Overview
- Chapter 1. Background
- Section 1.1. The Inevitability of Software Failure
- Section 1.2. The Evolution of Access Control Security in Operating Systems
- Section 1.3. Summary
- Exercises
- Chapter 2. Concepts
- Section 2.1. Security Contexts for Type Enforcement
- Section 2.2. Type Enforcement Access Control
- Section 2.3. The Role of Roles
- Section 2.4. Multilevel Security in SELinux
- Section 2.5. SELinux Features Familiarization
- Section 2.6. Summary
- Exercises
- Chapter 3. Architecture
- Section 3.1. The Kernel Architecture
- Section 3.2. Userspace Object Managers
- Section 3.3. SELinux Policy Language
- Section 3.4. Summary
- Exercises
- Part II: SELinux Policy Language
- Chapter 4. Object Classes and Permissions
- Section 4.1. Purpose of Object Classes in SELinux
- Section 4.2. Defining Object Classes in SELinux Policy
- Section 4.3. Available Object Classes
- Section 4.4. Object Class Permission Examples
- Section 4.5. Exploring Object Classes with Apol
- Section 4.6. Summary
- Exercises
- Chapter 5. Type Enforcement
- Section 5.1. Type Enforcement
- Section 5.2. Types, Attributes, and Aliases
- Section 5.3. Access Vector Rules
- Section 5.4. Type Rules
- Section 5.5. Exploring Type Enforcement Rules with Apol
- Section 5.6. Summary
- Exercises
- Chapter 6. Roles and Users
- Section 6.1. Role-Based Access Control in SELinux
- Section 6.2. Roles and Role Statements
- Section 6.3. Users and User Statements
- Section 6.4. Exploring Roles and Users with Apol
- Section 6.5. Summary
- Exercises
- Chapter 7. Constraints
- Section 7.1. A Closer Look at the Access Decision Algorithm
- Section 7.2. Constrain Statement
- Section 7.3. Label Transition Constraints
- Section 7.4. Summary
- Exercises
- Chapter 8. Multilevel Security
- Section 8.1. Multilevel Security Constraints
- Section 8.2. Security Contexts with MLS
- Section 8.3. MLS Constraints
- Section 8.4. Other Impacts of MLS
- Section 8.5. Summary
- Exercises
- Chapter 9. Conditional Policies
- Section 9.1. Overview of Conditional Policies
- Section 9.2. Boolean Variables
- Section 9.3. Conditional Statements
- Section 9.4. Examining Booleans and Conditional Policies with Apol
- Section 9.5. Summary
- Exercises
- Chapter 10. Object Labeling
- Section 10.1. Introduction to Object Labeling
- Section 10.2. File-Related Object Labeling
- Section 10.3. Network and Socket Object Labeling
- Section 10.4. System V IPC
- Section 10.5. Miscellaneous Object Labeling
- Section 10.6. Initial Security Identifiers
- Section 10.7. Exploring Object Labeling with Apol
- 1
- 2
