112

P

how to, 68

running a different policy

performance tuning, 73

how to, 67

how to, 89

permissions

common sets, 10

S

definition, 10

policy

seaudit

boot, 7

how to use, 76

files and directories, 6

security contexts

how it works, 5

and the kernel, 9

internal functions, 5

file systems, 8

overview, 5

security types

targeted, 29

dhcpd, 48

required packages, 5

security.selinux, 8

system start up

SELinux

(See boot)

(See explained)

writing policy, 99

and Flask, 3

policy analysis

and LSM, 3

direct information flow, 88

architecture, 1

domain transition analysis, 88

compiling, 91

policy components, 84

control methods, 55

TE rule analysis, 85

documentation references

TE rules, 84

(See references)

tools

history of, 107

apol, 83

maintenance, 55

seaudit, 76

tools, 73

policy and

what is, i

roles, 24

SELinux files and directories, 30

users, 24

what are, iii

policy build

SELinux status

what is, 93

how to, 62

prerequisite knowledge, ii

selinuxfs file system, 27

ps command

setting the context for a file system

using with SELinux, 56

how to, 68

shell scripts

enabling or disabling SELinux, 65

R

useful commands, 69

rebooting

start up

how to know when to reboot, 70

(See boot)

references, 103

start up procedure

Flask, 103

(See boot)

NSA, 103

subscription registration, vii

SELinux, 103

summary

registering your subscription, vii

policy, 5

relabeling

syntax

entire file systems, 62

access vector rule, 19

files or directories, 57

attribute declaration, 12

roles, 24

avc: denied message, 20

assuming a new role, 69

constraint, 26

targeted policy members, 43

file context description, 38

roles and user

network declaration, 34

targeted policy, 43

neverallow rule, 20

rule analysis

object class access vector definitions, 12

(See TE rule analysis)

object class sets, 11

running a command in a specific context

role allow, 25