Red Hat Enterprise Linux 4: Red Hat SELinux Guide
Prev		Next

Index

CentOS 6 Essentials
eBook

$9.99

eBookFrenzy.com

Symbols

$SELINUX_POLICY/

what is, Conventions for SELinux Directories and Files

$SELINUX_SRC/

what is, Conventions for SELinux Directories and Files

A

access vector rule

syntax, TE Rules - Access Vectors

access vectors, TE Rules - Access Vectors

activating your subscription, Activate Your Subscription

analysis

see tools
see policy analysis
dumping or viewing the logs, Dump and View Logs
dumping or viewing the policy, Dump or View Policy
logs, Controlling and Maintaining SELinux

analyzing

kernel audit message, Enable Kernel Auditing
macros, How To Backtrack a Rule

apol

how to use, Using apol for Policy Analysis

architecture

SELinux, SELinux Architectural Overview

archiving files and directories, Make Backups or Archives That Retain Security Contexts

assuming a new role or type

how to, Assume a New Role

attribute declaration

syntax, TE Rules - Attributes

attributes, TE Rules - Attributes

auditing

how to enable kernel auditing, Enable Kernel Auditing

AV

see access vectors

AVC statistics

how to view, Viewing AVC Statistics

avc: denied

explained, Understanding an avc: denied Message
troubleshooting, Troubleshoot User Problems With SELinux

B

background

SELinux, Brief Background and History of SELinux

backing up files

see archiving files and directories

backtracking a rule

how to, How To Backtrack a Rule

Booleans

command line tools, Change a Boolean Setting
explained, Files and Directories of the Targeted Policy
how to change, Change a Boolean Setting
settings, Files and Directories of the Targeted Policy

boot

policy role in, Policy Role in Boot

building

see compiling

building policy

how to, Compiling SELinux Policy
what is, What Happens During Policy Build

C

CGI scripts

how to run from a mounted directory, Specifying the Security Context of Entire File Systems

changing a Boolean

how to, Change a Boolean Setting

changing the policy

how to, Change the Policy

checking status

how to, View the Status of SELinux

checkpolicy

how to use, What Happens During Policy Build

command line tools

avcstat, Viewing AVC Statistics, Information Gathering Tools
checkpolicy, What Happens During Policy Build
enabling or disabling enforcement, Enable or Disable Enforcement
newrole, Assume a New Role
runcon, Run a Command in a Specified Security Context
seinfo, Information Gathering Tools
sesearch, Information Gathering Tools
sestatus, View the Status of SELinux
setting Booleans, Change a Boolean Setting
useful for shell scripts, Useful Commands for Scripts

commands with SELinux options

cp, Move or Copy Files
id, Check the Security Context of a Process, User, or File Object
ls, Check the Security Context of a Process, User, or File Object
mount, Specifying the Security Context of Entire File Systems
mv, Move or Copy Files
ps, Check the Security Context of a Process, User, or File Object

compiling

SELinux, Compiling SELinux Policy

compiling policy

how to, Policy Compile Procedure

constraints, TE Rules - Constraints

controlling SELinux, Controlling and Maintaining SELinux

administrators, Administrator Control of SELinux
analysts, Enable Kernel Auditing
end users, End User Control of SELinux

conventions

document, Document Conventions

cp command

using with SELinux, Move or Copy Files

customizing policy

how to, Customizing and Writing Policy

D

DAC

definition, Brief Background and History of SELinux

definition of

DAC, Brief Background and History of SELinux
MAC, Brief Background and History of SELinux
object classes, Object Classes and Permissions
permissions, Object Classes and Permissions
targeted policy, What is the Targeted Policy?

direct information flow

see information flow

directories

policy files and directories, Files and Directories of the Targeted Policy

directories for SELinux

what are, Conventions for SELinux Directories and Files
where are, Where is the Policy?

directory access

how to, Grant Access to a Directory or a Tree

directory presentation, Conventions for SELinux Directories and Files

disable

enforcement, Enable or Disable Enforcement
SELinux, Enable or Disable Enforcement
SELinux protection of a daemon, Enable or Disable Enforcement

discretionary access control

see DAC

documentation references

see references

domain transition analysis, Domain Transition Analysis

domains

attributes, TE Rules - Attributes
dhcpd, Policy Types - dhcpd
domain transition analysis, Domain Transition Analysis

dumping logs

how to, Dump and View Logs

dumping policy

how to, Dump or View Policy

E

enable

enforcement, Enable or Disable Enforcement
kernel auditing, Enable Kernel Auditing
SELinux, Enable or Disable Enforcement
SELinux protection of a daemon, Enable or Disable Enforcement

end users

controlling and maintaining SELinux, End User Control of SELinux
troubleshooting user problems, Troubleshoot User Problems With SELinux

example

file contexts files, Understanding the File Contexts Files
network declaration, Files and Directories of the Targeted Policy
role allow, SELinux Roles
role declaration, SELinux Roles

F

file content description

syntax, Understanding the File Contexts Files

file contexts files

example, Understanding the File Contexts Files

files

policy files and directories, Files and Directories of the Targeted Policy
where are SELinux files, Where is the Policy?

Flask, Brief Background and History of SELinux

documentation references

see references

Flask security architecture

and SELinux, Flask Security Architecture and SELinux, SELinux, an Implementation of Flask

further reading

see references

G

genfs labeling, File System Security Contexts

granting access to a directory

how to, Grant Access to a Directory or a Tree

GUI tools

apol, Using apol for Policy Analysis
seaudit, Using seaudit for Audit Log Analysis

H

history

SELinux, Brief Background and History of SELinux

how to

administrator tasks, Administrator Control of SELinux
analyze a macro, How To Backtrack a Rule
archive files and directories, Make Backups or Archives That Retain Security Contexts
assume a new role or type, Assume a New Role
backtrack a rule, How To Backtrack a Rule
backup files, Make Backups or Archives That Retain Security Contexts
change a Boolean setting, Change a Boolean Setting
change the policy, Change the Policy
compile policy, Policy Compile Procedure
dump or view logs, Dump and View Logs
dump or view policy, Dump or View Policy
enable kernel auditing, Enable Kernel Auditing
enable or disable enforcement, Enable or Disable Enforcement
enable or disable SELinux protection of a daemon, Enable or Disable Enforcement
end user tasks, End User Control of SELinux
grant access to a directory, Grant Access to a Directory or a Tree
install a policy package, Load a Policy
know when to compile, Policy Compile Procedure
know when to reboot, When to Reboot
load a binary policy, Load a Policy
manage NFS home directories, Managing NFS Home Directories
performance tune, Performance Tuning
relabel a file or directory, Relabel a File or Directory's Security Context
relabel a file system, Relabel a File System
run a CGI script, Specifying the Security Context of Entire File Systems
run a command in a specified context, Run a Command in a Specified Security Context
run a different policy, Change the Policy
serve Web content from a mounted directory, Specifying the Security Context of Entire File Systems
set context for a file system, Specifying the Security Context of Entire File Systems
troubleshoot SELinux, Troubleshoot User Problems With SELinux
use apol, Using apol for Policy Analysis
use checkpolicy, What Happens During Policy Build
use seaudit, Using seaudit for Audit Log Analysis
validate a policy, What Happens During Policy Build
view AVC statistics, Viewing AVC Statistics
view SELinux status, View the Status of SELinux
write new policy for a daemon, Writing New Policy for a Daemon

I

id command

using with SELinux, Check the Security Context of a Process, User, or File Object

information flow

direct and transitive, Direct and Transitive Information Flow

installing a policy package

how to, Load a Policy

interfaces

see kernel

introduction, Introduction to the Red Hat SELinux Guide

K

kernel

hooks and security contexts, Security Contexts and the Kernel
interfaces, Special Interfaces and File Systems

L

labeling, File System Security Contexts

mountpoint labeling, File System Security Contexts
setting label option on mount, File System Security Contexts
single label for entire file system, File System Security Contexts

links

see references

Linux Security Modules

see LSM

loading a binary policy

how to, Load a Policy

log

analysis, Controlling and Maintaining SELinux

ls command

using with SELinux, Check the Security Context of a Process, User, or File Object

LSM

and SELinux, SELinux, an Implementation of Flask, Brief Background and History of SELinux

M

m4

see macros

MAC

definition, Brief Background and History of SELinux

macro

analysis, How To Backtrack a Rule

macro usage

example, Policy Macros

macros, Policy Macros

common, Common Macros in the Targeted Policy

maintaining SELinux, Controlling and Maintaining SELinux

administrators, Administrator Control of SELinux
end users, End User Control of SELinux

making a directory accessible

how to, Grant Access to a Directory or a Tree

mandatory access control

see MAC

MLS

MAC, SELinux Architectural Overview

mount options

genfs labeling, File System Security Contexts

mounting file systems

and security labeling, File System Security Contexts

mountpoint labeling, File System Security Contexts

multi-level security

see MLS

mv command

using with SELinux, Move or Copy Files

N

network declaration

example, Files and Directories of the Targeted Policy
syntax, Files and Directories of the Targeted Policy

neverallow rule

syntax, TE Rules - Access Vectors

NFS home directories

how to manage, Managing NFS Home Directories

NSA

documentation references

see references

O

object class access vector definitions

syntax, Object Classes and Permissions

object class sets

syntax, Object Classes and Permissions

object classes

definition, Object Classes and Permissions

P

performance tuning, Tools for Manipulating and Analyzing SELinux

how to, Performance Tuning

permissions

common sets, Object Classes and Permissions
definition, Object Classes and Permissions

policy

boot, Policy Role in Boot

files and directories, Where is the Policy?

how it works, SELinux Policy Overview

internal functions, SELinux Policy Overview

overview, SELinux Policy Overview

targeted, Targeted Policy Overview

required packages, SELinux Policy Overview

system start-up

see boot

writing policy, Writing New Policy for a Daemon

policy analysis

direct information flow, Direct and Transitive Information Flow

domain transition analysis, Domain Transition Analysis

policy components, Policy Component Analysis

TE rule analysis, TE Rule Analysis

TE rules, Policy Component Analysis

tools

apol, Using apol for Policy Analysis
seaudit, Using seaudit for Audit Log Analysis

policy and

roles, SELinux Users and Roles
users, SELinux Users and Roles

policy build

what is, What Happens During Policy Build

prerequisite knowledge, Prerequisites for This Guide

ps command

using with SELinux, Check the Security Context of a Process, User, or File Object

R

rebooting

how to know when to reboot, When to Reboot

references, References

Flask, References
NSA, References
SELinux, References

registering your subscription, Activate Your Subscription

relabeling

entire file systems, Relabel a File System
files or directories, Relabel a File or Directory's Security Context

roles, SELinux Users and Roles

assuming a new role, Assume a New Role
targeted policy members, Understanding the Roles and Users in the Targeted Policy

roles and user

targeted policy, Understanding the Roles and Users in the Targeted Policy

rule analysis

see TE rule analysis

running a command in a specific context

how to, Run a Command in a Specified Security Context

running a different policy

how to, Change the Policy

S

seaudit

how to use, Using seaudit for Audit Log Analysis

security contexts

and the kernel, Security Contexts and the Kernel
file systems, File System Security Contexts

security types

dhcpd, Policy Types - dhcpd

security.selinux, File System Security Contexts

SELinux

see explained
and Flask, SELinux, an Implementation of Flask
and LSM, SELinux, an Implementation of Flask
architecture, SELinux Architectural Overview
compiling, Compiling SELinux Policy
control methods, Controlling and Maintaining SELinux
documentation references
see references
history of, Brief Background and History of SELinux
maintenance, Controlling and Maintaining SELinux
tools, Tools for Manipulating and Analyzing SELinux
what is, What Is SELinux?

SELinux files and directories, Files and Directories of the Targeted Policy

what are, Conventions for SELinux Directories and Files

SELinux status

how to, View the Status of SELinux

selinuxfs file system, Special Interfaces and File Systems

setting the context for a file system

how to, Specifying the Security Context of Entire File Systems

shell scripts

enabling or disabling SELinux, Enable or Disable Enforcement
useful commands, Useful Commands for Scripts

start-up

see boot

start-up procedure

see boot

subscription registration, Activate Your Subscription

summary

policy, SELinux Policy Overview

syntax

access vector rule, TE Rules - Access Vectors
attribute declaration, TE Rules - Attributes
avc: denied message, Understanding an avc: denied Message
constraint, TE Rules - Constraints
file context description, Understanding the File Contexts Files
network declaration, Files and Directories of the Targeted Policy
neverallow rule, TE Rules - Access Vectors
object class access vector definitions, Object Classes and Permissions
object class sets, Object Classes and Permissions
role allow, SELinux Roles
role declaration, SELinux Roles
type declaration, TE Rules - Types
type transition, TE Rules - Types

system administrators

controlling and maintaining SELinux, Administrator Control of SELinux

T

targeted policy

common macros, Common Macros in the Targeted Policy
defined, What is the Targeted Policy?
roles and users, Understanding the Roles and Users in the Targeted Policy

TE rule analysis, TE Rule Analysis

tools

for users, Controlling and Maintaining SELinux
SELinux, Tools for Manipulating and Analyzing SELinux

transition analysis

see domain transition analysis

transitive information flow

see information flow

troubleshooting SELinux

how to, Troubleshoot User Problems With SELinux

tunables

AVC cache threshold, Performance Tuning

type declarations, TE Rules - Types

syntax, TE Rules - Types

Type Enforcement

access vectors, TE Rules - Access Vectors

type transition

syntax, TE Rules - Types

types

assuming a new type, Assume a New Role
attributes, TE Rules - Attributes

U

URLs

see references

users, SELinux Users and Roles, End User Control of SELinux

see also end users
$SELINUX_SRC/users file explained, Understanding the Roles and Users in the Targeted Policy

using seaudit, Using seaudit for Audit Log Analysis

arranging views, Arranging Your Views in seaudit
basic filters, Arranging Your Views in seaudit

V

validating a policy

how to, What Happens During Policy Build

viewing

AVC statistics, Viewing AVC Statistics
logs, Dump and View Logs
policy, Dump or View Policy

W

Web content

how to serve from a mounted directory, Specifying the Security Context of Entire File Systems

what are

access vectors, TE Rules - Access Vectors
administrator tasks, Administrator Control of SELinux
attributes, TE Rules - Attributes
directories for SELinux, Conventions for SELinux Directories and Files
end user tasks, End User Control of SELinux
file labels, File System Security Contexts
files and directories used by SELinux, Files and Directories of the Targeted Policy
macros, Policy Macros
object classes, Object Classes and Permissions
roles, SELinux Users and Roles
security contexts, File System Security Contexts
security labels, File System Security Contexts
types, TE Rules - Types
users, SELinux Users and Roles

what happens

during policy build, What Happens During Policy Build

what is

$SELINUX_POLICY/, Conventions for SELinux Directories and Files
$SELINUX_SRC/, Conventions for SELinux Directories and Files
avc: denied, Understanding an avc: denied Message
labeling, File System Security Contexts
mountpoint labeling, File System Security Contexts
policy, SELinux Policy Overview
policy build, What Happens During Policy Build
policy role in boot, Policy Role in Boot
SELinux, What Is SELinux?
selinuxfs file system, Special Interfaces and File Systems
targeted policy, What is the Targeted Policy?
the architecture of SELinux, Flask Security Architecture and SELinux

what you should know, Prerequisites for This Guide

when to

compile, Policy Compile Procedure
reboot, When to Reboot

where are

files and directories for SELinux, Where is the Policy?

writing policy

how to, Customizing and Writing Policy

X

xattr

holding security context labels, File System Security Contexts

Prev	Home	Next
Brief Background and History of SELinux		Colophon