selinux and redhat9

selinux and redhat9

[Stephen Reese]

I have been an avid redhat user/admin for the last 3 years, and I'm
interested to know where's the best place to get started with Q/A about
this project obviously besides the original site???


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: selinux and redhat9

[Kerry Thompson]

Stephen Reese said:
> I have been an avid redhat user/admin for the last 3 years, and I'm
> interested to know where's the best place to get started with Q/A about
> this project obviously besides the original site???

Hi Stephen

There's many resources around covering most of the Linux distributions,
including RedHat.

Faye Coker's HOWTO (
http://sourceforge.net/docman/display_doc.php?docid=15285&group_id=21266 )
is a great place to start, although its based on Debian rather than RedHat
its well worth reading.

I wrote an article for SysAdmin magazine a while ago which introduces
SELinux on RedHat and looks at a policy for the BIND DNS server:
http://www.samag.com/documents/s=7835/sam0303a/0303a.htm.

TreSys have a number of good papers at http://www.tresys.com/selinux.html.

And there's my "UnOfficial FAQ" which is also worth looking at if you're
starting out: http://www.crypt.gen.nz/selinux/faq.html

.. and Russell Coker has an article in the upcoming August edition of
Linux Journal magazine which will be worth reading.

I recommend just giving it a go. Download the current SELinux release from
the NSA site, go through the README file and install it on a test system (
or on a spare disk drive, or whatever ). Look at how files are labelled,
and how the type enforcement rules work, then start making changes and
seeing what results you get. It may sound daunting at first, but after
you've got an installation running you'll find that its not particularly
hard at all.

Kerry





--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.