|
Trick: Tuning Your SELinux Policy with Audit2allow |
|
|
|
Friday, 29 July 2005 |
Fedora Core 3 Linux has been shipping with Security Enhanced Linux
(SELinux) enabled by default for about six months now. SELinux allows
privileges to be separated much more finely than the typical approach
of having users and groups and the all-powerful root "superuser". The
default SELinux configuration is fine for some uses, but the SELinux
configuration files make sendmail.cf look easy. In this article, I will show you step-by-step how to tune your SELinux policy to your specific needs using the audit2allow tool.
SELinux is a kernel patch (which was merged into the main kernel.org
kernel in the 2.6.0-test series) that provides the hooks needed to
detect, log, and enforce Mandatory Access Controls on processes. The
rules that control what is allowed and disallowed constitute a
"policy". This policy includes rules specifying which things are
managed under the SELinux framework.
Read more at SysAdmin
|
Tips and Tricks 
