SELinux-by-Example-Using-Security-Enhanced-Linux_selinux

5星 · 超过95%的资源需积分: 50 184 浏览量更新于2023-05-19 评论 1 收藏 26.67MB PDF 举报

身份认证购VIP最低享 7 折!

领优惠券(最高得80元）

资源详情

资源评论

资源推荐

SELinux by Example: Using Security Enhanced Linux

FrankMayer,

KarlMacMillan,

DavidCaplan

...............................................

Publisher:

Prentice Hall

Pub Date:

July 27, 2006

Print ISBN-10:

0-131-96369-4

Print ISBN-13:

978-0-13-196369-6

Pages:

456



Table of Contents |Index



SELinux: Bring World

-Class Security to Any Linux Environment!



SELinux offers Linux/UNIX integrators, administrators, and developers a state-of-the-

art platform for building and

maintaining highly secure solutions. Now that SELinux is included in the Linux 2.6 kerneland delivered by default in

Fedora Core, Red Hat Enterprise Linux, and other major distributionsit's easier than ever to take advantage of its

benefits.



SELinux by Example

is the first complete, hands-on guide to using SELinux in production environments. Authored by

three leading SELinux researchers and developers, it illuminates every facet of working with SELinux, from its

architecture and security object model to its policy language. The book thoroughly explains SELinux sample policies

including the powerful new Reference Policyshowing how to quickly adapt them to your unique environment. It also

contains a comprehensive SELinux policy language reference and covers exciting new features in Fedora Core 5

and the upcoming Red Hat Enterprise Linux version 5.



• Thoroughly understand SELinux's access control and security mechanisms

• Use SELinux to construct secure systems from the ground up

•

Gain fine

-grained control over kernel resources

• Write policy statements for type enforcement, roles, users, and constraints

• Use optional multilevel security to enforce information classification and manage users with diverse clearances

• Create conditional policies that can be changed on-the-fly

•

Define, manage, and maintain SELinux security policies

• Develop and write new SELinux security policy modules

• Leverage emerging SELinux technologies to gain even greater flexibility

• Effectively administer any SELinux system

This document is created with trial version of CHM2PDF Pilot 2.15.72.

   
SELinux by Example: Using Security Enhanced Linux
By 
FrankMayer,
, 
KarlMacMillan,
, 
DavidCaplan
...............................................
Publisher: 
Prentice Hall
Pub Date: 
July 27, 2006
Print ISBN-10: 
0-131-96369-4
Print ISBN-13: 
978-0-13-196369-6
Pages: 
456

Table of Contents |Index

Copyright

Prentice Hall Open Source Software Development Series

Acknowledgments

About the Authors

Preface

Part I: SELinux Overview

 
Chapter 1. Background

 
Section 1.1. The Inevitability of Software Failure

 
Section 1.2. The Evolution of Access Control Security in Operating Systems

 
Section 1.3. Summary

 
Exercises

 
Chapter 2. Concepts

 
Section 2.1. Security Contexts for Type Enforcement

 
Section 2.2. Type Enforcement Access Control

 
Section 2.3. The Role of Roles

 
Section 2.4. Multilevel Security in SELinux

 
Section 2.5. SELinux Features Familiarization

 
Section 2.6. Summary

 
Exercises

 
Chapter 3. Architecture

 
Section 3.1. The Kernel Architecture

 
Section 3.2. Userspace Object Managers

 
Section 3.3. SELinux Policy Language

 
Section 3.4. Summary

 
Exercises

Part II: SELinux Policy Language

 
Chapter 4. Object Classes and Permissions

 
Section 4.1. Purpose of Object Classes in SELinux

 
Section 4.2. Defining Object Classes in SELinux Policy

 
Section 4.3. Available Object Classes

 
Section 4.4. Object Class Permission Examples

 
Section 4.5. Exploring Object Classes with Apol

 
Section 4.6. Summary

 
Exercises

 
Chapter 5. Type Enforcement

 
Section 5.1. Type Enforcement

 
Section 5.2. Types, Attributes, and Aliases

 
Section 5.3. Access Vector Rules

 
Section 5.4. Type Rules

 
Section 5.5. Exploring Type Enforcement Rules with Apol

 
Section 5.6. Summary

 
Exercises

 
Chapter 6. Roles and Users

 
Section 6.1. Role
-
Based Access Control in SELinux

 
Section 6.2. Roles and Role Statements

 
Section 6.3. Users and User Statements

 
Section 6.4. Exploring Roles and Users with Apol

 
Section 6.5. Summary

 
Exercises

 
Chapter 7. Constraints
   
This document is created with trial version of CHM2PDF Pilot 2.15.72.

   

 
Section 7.1. A Closer Look at the Access Decision Algorithm

 
Section 7.2. Constrain Statement

 
Section 7.3. Label Transition Constraints

 
Section 7.4. Summary

 
Exercises

 
Chapter 8. Multilevel Security

 
Section 8.1. Multilevel Security Constraints

 
Section 8.2. Security Contexts with MLS

 
Section 8.3. MLS Constraints

 
Section 8.4. Other Impacts of MLS

 
Section 8.5. Summary

 
Exercises

 
Chapter 9. Conditional Policies

 
Section 9.1. Overview of Conditional Policies

 
Section 9.2. Boolean Variables

 
Section 9.3. Conditional Statements

 
Section 9.4. Examining Booleans and Conditional Policies with Apol

 
Section 9.5. Summary

 
Exercises

 
Chapter 10. Object Labeling

 
Section 10.1. Introduction to Object Labeling

 
Section 10.2. File
-
Related Object Labeling

 
Section 10.3. Network and Socket Object Labeling

 
Section 10.4. System V IPC

 
Section 10.5. Miscellaneous Object Labeling

 
Section 10.6. Initial Security Identifiers

 
Section 10.7. Exploring Object Labeling with Apol

 
Section 10.8. Summary

 
Exercises

Part III: Creating and Writing SELinux Security Policies

 
Chapter 11. Original Example Policy

 
Section 11.1. Methods for Managing the Build Process

 
Section 11.2. Strict Example Policy

 
Section 11.3. Targeted Example Policy

 
Section 11.4. Summary

 
Exercises

 
Chapter 12. Reference Policy

 
Section 12.1. Goals of the Reference Policy

 
Section 12.2. Overview of Policy Source File Structure

 
Section 12.3. Design Principles

 
Section 12.4. Examining a Reference Policy Module

 
Section 12.5. Build Options for Reference Policy

 
Section 12.6. Summary

 
Exercises

 
Chapter 13. Managing an SELinux System

 
Section 13.1. SELinux Configuration and Policy Management Files

 
Section 13.2. Impact of SELinux on System Administration

 
Section 13.3. Summary

 
Exercises

 
Chapter 14. Writing Policy Modules

 
Section 14.1. Overview of Writing a Policy Module

 
Section 14.2. Preparation and Planning

 
Section 14.3. Creating an Initial Policy Module

 
Section 14.4. Testing and Analyzing the Policy

 
Section 14.5. Emerging Policy Development Tools

 
Section 14.6. Complete IRC Daemon Module Listings

 
Section 14.7. Summary

 
Appendix A. Obtaining SELinux Sample Policies

 
Section A.1. Example Policy

 
Section A.2. Reference Policy

 
Appendix B. Participation and Further Information

 
Section B.1. The SELinux Mail List

 
Section B.2. The Annual SELinux Symposium
   
This document is created with trial version of CHM2PDF Pilot 2.15.72.

   

 
Section B.3. The NSA The

 
Section B.4. Tresys Technology

 
Section B.5. Open Source Projects

 
Section B.6. The SELinux IRC Channel

 
Section B.7. The Fedora Core Site

 
Section B.8. Hardened Gentoo

 
Section B.9. Other Related Security Information

 
Appendix C. Object Classes and Permissions

 
Section C.1. Common Permission Sets

 
Section C.2. Object Classes and Defined Permission Sets

 
Appendix D. SELinux Commands and Utilities

 
Section D.1. System Utilities

 
Section D.2. SETools Suite

 
Section D.3. Other SELinux Tools

Index
   
This document is created with trial version of CHM2PDF Pilot 2.15.72.

Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks.

Where those designations appear in this book, and the publisher was aware of a trademark claim, the designations

have been printed with initial capital letters or in all capitals.

Much of the structure and organization, and portions of the detailed content, of this book are based on material

from Tresys Technology, LLC, their training courses, and their open source tools. Used with permission. The authors

and publisher have taken care in the preparation of this book, but make no expressed or implied warranty of any kind

and assume no responsibility for errors or omissions. No liability is assumed for incidental or consequential damages in

connection with or arising out of the use of the information or programs contained herein.

The publisher offers excellent discounts on this book when ordered in quantity for bulk purchases or special sales,

which may include electronic versions and/or custom covers and content particular to your business, training goals,

marketing focus, and branding interests. For more information, please contact:

U.S.CorporateandGovernmentSales

(800)382-

3419

corpsales@pearsontechgroup.com

For sales outside the United States, please contact:

InternationalSales



international@pearsoned.com

Library of Congress Cataloging-

-Publication Data

Mayer,Frank,1961-

SELinuxbyExample:UnderstandingSecurityEnhancedLinux/FrankMayer,KarlMacMillan,DavidCaplan.

p.cm.

Includesbibliographicalreferencesandindex.

ISBN0

196369

-4(pbk.:alk.paper)1.Linux.2.Operatingsystems(Computers)3.Computernetworks

-- Securitymeasures.I.MacMillan,Karl,1975-

II.Caplan,David,1963

-III.Title.

QA76.76.O63M37382006

005.8

-- dc22

2006012657

permission must be obtained from the publisher prior to any prohibited reproduction, storage in a retrieval system, or

transmission in any form or by any means, electronic, mechanical, photocopying, recording, or likewise. For

information regarding permissions, write to:

PearsonEducation,Inc.

RightsandContractsDepartment

OneLakeStreet

UpperSaddleRiver,NJ07458

Fax:(201)236 -

3290

Text printed in the United States on recycled paper at R.R. Donnelley & Sons in Crawfordsville, Indiana First printing,

August 2007

Dedication

To our wives Barbara, Sawyer, and Kimberly

This document is created with trial version of CHM2PDF Pilot 2.15.72.

剩余338页未读，继续阅读

wxjdog

2023-12-16

selinux 很好的学习参考资料。

我是一头老牛

粉丝: 0
资源: 3

会员权益专享

SELinux-by-Example-Using-Security-Enhanced-Linux

评论4

会员权益专享

最新资源

SELinux-by-Example-Using-Security-Enhanced-Linux

评论4

SELinux by Example Using Security Enhanced Linux

SELinux.zip

SELinux详解（带完整中文标签）

selinux-utils 源码在哪

requires: selinux-policy >= 3.13.1-229.el7_6.12 installed: selinux-policy-3.

openstack-selinux-0.8.26-1.el7.noarch.rpm

linux中导出container-selinux-2.74.2-1.911c772.el7_8.noarch

selinux-policy-3.13.1-268.el7_9.2.noarch

policycoreutils-python 被 container-selinux-2:2.119.2-1.911c772.el7_8.noarch

dnf install zabbix-server-mysql zabbix-web-mysql zabbix-nginx-conf zabbix-sql-scripts zabbix-selinux-policy zabbix-agent

ExecStart=/usr/local/sbin/dockerd --selinux-enabled=false -H unix:///var/run/docker.sock -H tcp://0.0.0.0:2375 --data-root=/data/docker 作用是

警告：/var/cache/yum/x86_64/7/extras/packages/container-selinux-2.119.2-1.911c772.el7_8.noarch.rpm: 头V3 RSA/SHA256 Signature, 密钥 ID f4a80eb5: NOKEY container-selinux-2.119.2-1.911c772.el7_8.noarch.rpm 的公钥尚未安装

linuxSElinux怎么下载

yocto rocko 中bitbake selinux 时出现ERROR: Nothing PROVIDES 'selinux'. Close matches: libselinux syslinux selinux-gui

sudo tar --selinux -zxvf $STORE_DIR/$filename -C $BACKUP_DIR

Linux selinux 怎么安装

podman对应的--security-opt命令时什么

centos7中no selinux poliy错误怎么解决

ERROR: Nothing PROVIDES 'libselinux_git'. Close matches: libselinux selinux-gui libselinux-native

Linux开机关闭selinux

会员权益专享

最新资源