| Description |
1 online resource (1 volume) : illustrations |
| Contents |
Cover ; Credits; About the Author; About the Reviewers; www.PacktPub.com; Table of Contents; Preface; Chapter 1: Fundamental SELinux Concepts ; Providing more security to Linux; Using Linux security modules; Extending regular DAC with SELinux; Restricting root privileges; Reducing the impact of vulnerabilities; Enabling SELinux support; Labeling all resources and objects; Dissecting the SELinux context; Enforcing access through types; Granting domain access through roles; Limiting roles through users; Controlling information flow through sensitivities; Defining and distributing policies. |
|
Writing SELinux policiesDistributing policies through modules; Bundling modules in a policy store; Distinguishing between policies; Supporting MLS; Dealing with unknown permissions; Supporting unconfined domains; Limiting cross-user sharing; Incrementing policy versions; Different policy content; Summary; Chapter 2: Understanding SELinux Decisions and Logging ; Switching SELinux on and off; Setting the global SELinux state; Switching to permissive (or enforcing) mode; Using kernel boot parameters; Disabling SELinux protections for a single service; Understanding SELinux-aware applications. |
|
SELinux logging and auditingFollowing audit events; Uncovering more logging; Configuring Linux auditing; Configuring the local system logger; Reading SELinux denials; Other SELinux-related event types; USER_AVC; SELINUX_ERR; MAC_POLICY_LOAD; MAC_CONFIG_CHANGE; MAC_STATUS; NetLabel events; Labeled IPsec events; Using ausearch; Getting help with denials; Troubleshooting with setroubleshoot; Sending e-mails when SELinux denials occur; Using audit2why; Interacting with systemd-journal; Using common sense; Summary; Chapter 3: Managing User Logins ; User-oriented SELinux contexts. |
|
Understanding domain complexityQuerying for unconfined domains; SELinux users and roles; Listing SELinux user mappings; Mapping logins to SELinux users; Customizing logins towards services; Creating SELinux users; Listing accessible domains; Managing categories; Handling SELinux roles; Defining allowed SELinux contexts; Validating contexts with getseuser; Switching roles with newrole; Managing role access through sudo; Reaching other domains using runcon; Switching to the system role; SELinux and PAM; Assigning contexts through PAM; Prohibiting access during permissive mode. |
|
Polyinstantiating directoriesSummary; Chapter 4: Process Domains and File-Level Access Controls ; About SELinux file contexts; Getting context information; Interpreting SELinux context types; Keeping or ignoring contexts; Inheriting the default context; Querying transition rules; Copying and moving files; Temporarily changing file contexts; Placing categories on files and directories; Using multilevel security on files; Backing up and restoring extended attributes; Using mount options to set SELinux contexts; SELinux file context expressions; Using context expressions. |
| Summary |
Annotation Ward off traditional security permissions and effectively secure your Linux systems with SELinuxAbout This Book Leverage SELinux to improve the secure state of your Linux system A clear approach to adopting SELinux within your organization Essential skills and techniques to help further your system administration careerWho This Book Is ForThis book is for Linux administrators who want to control the secure state of their systems. It's packed with the latest information on SELinux operations and administrative procedures so you'll be able to further harden your system through mandatory access control (MAC) a security strategy that has been shaping Linux security for years. What You Will Learn Analyze SELinux events and selectively enable or disable SELinux enforcement Manage Linux users and associate them with the right role and permission set Secure network communications through SELinux access controls Tune the full service flexibility by dynamically assigning resource labels Handle SELinux access patterns enforced through the system Query the SELinux policy in depthIn DetailDo you have the crucial job of protecting your private and company systems from malicious attacks and undefined application behavior? Are you looking to secure your Linux systems with improved access controls? Look no further, intrepid administrator! This book will show you how to enhance your system's secure state across Linux distributions, helping you keep application vulnerabilities at bay. This book covers the core SELinux concepts and shows you how to leverage SELinux to improve the protection measures of a Linux system. You will learn the SELinux fundamentals and all of SELinux's configuration handles including conditional policies, constraints, policy types, and audit capabilities. These topics are paired with genuine examples of situations and issues you may come across as an administrator. In addition, you will learn how to further harden the virtualization offering of both libvirt (sVirt) and Docker through SELinux. By the end of the book you will know how SELinux works and how you can tune it to meet your needs. Style and approachThis book offers a complete overview of SELinux administration and how it integrates with other components on a Linux system. It covers the majority of SELinux features with a mix of real life scenarios, descriptions, and examples. This book contains everything an administrator needs to customize SELinux. |
| Subject |
Linux.
|
|
Linux |
|
Computer networks -- Security measures.
|
|
Réseaux d'ordinateurs -- Sécurité -- Mesures. |
|
Computer networks -- Security measures |
| Other Form: |
Print version: Vermeulen, Sven. SELinux system administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux. Second edition. Birmingham, England ; Mumbai, India : Packt Publishing, ©2016 276 pages 9781787126954 |
| ISBN |
9781787127067 (electronic bk.) |
|
1787127060 (electronic bk.) |
|
1787126951 (electronic bk.) |
|
9781787126954 (electronic bk.) |
|
More Resources