111

relabel a file or directory, 57

M

relabel a file system, 62

m4

run a CGI script, 68

(See macros)

run a command in a specified context, 68

run a different policy, 67

MAC

serve Web content from a mounted directory, 68

definition, 107

set context for a file system, 68

macro

troubleshoot SELinux, 67

analysis, 22

use apol, 83

macro usage

use checkpolicy, 93

example, 22

use seaudit, 76

macros, 21

validate a policy, 94

common, 39

view AVC statistics, 71

maintaining SELinux, 55

view SELinux status, 62

administrators, 62

write new policy for a daemon, 99

end users, 55

making a directory accessible

how to, 64

I

mandatory access control

(See MAC)

id command

MLS

using with SELinux, 56

MAC, 1

information flow

mount options

direct and transitive, 88

genfs labeling, 8

installing a policy package

mounting file systems

how to, 64

and security labeling, 8

interfaces

mountpoint labeling, 9

(See kernel)

multi level security

introduction, i

(See MLS)

mv command

K

using with SELinux, 55

kernel

hooks and security contexts, 9

N

interfaces, 27

network declaration

example, 34

L

syntax, 34

neverallow rule

labeling, 8

syntax, 20

mountpoint labeling, 9

NFS home directories

setting label option on mount, 9

how to manage, 63

single label for entire file system, 8

NSA

links

documentation references

(See references)

(See references)

Linux Security Modules

(See LSM)

loading a binary policy

O

how to, 64

log

object class access vector definitions

analysis, 55

syntax, 12

ls command

object class sets

using with SELinux, 56

syntax, 11

LSM

object classes

and SELinux, 3, 107

definition, 10