SELinux by Example: Using Security Enhanced Linux by David Caplan, Frank Mayer, Karl MacMillan

SELinux by Example: Using Security Enhanced Linux



Download eBook




SELinux by Example: Using Security Enhanced Linux David Caplan, Frank Mayer, Karl MacMillan ebook
Format: pdf
Publisher: Prentice Hall
Page: 339
ISBN: 0131963694, 9780131963696


SELinux by Example: Using Security Enhanced Linux download pdf. Summary: Linux® has been described as one of the most secure operating systems available, but the National Security Agency (NSA) has taken Linux to the next level with the introduction of Security-Enhanced Linux (SELinux). As we know Linux itself is based on discretionary access control, now with SElinux there is a mandatory access control layer within the kernel that along with DAC can provide rock solid security, I am going to be demonstrating the power of SElinux but first some theory on how it works. * use non-default directories to store which covers items to include. The name is not decided yet, but will be something like “Security-Enhanced manage DNS and BIND (for example, allow named to accept zone updates). * customize the ports services listen on. Feel free to mail me (mmcallis redhat com) with any ideas or things you would like included. My employer, Red Hat, is allowing me to work on another Security-Enhanced Linux (SELinux) guide for Fedora. SELinux by Example: Using Security Enhanced Linux by David Caplan, Frank Mayer, Karl MacMillan. SELinux takes For example, if you have a program that responds to socket requests but doesn't need to access the file system, then that program should be able to listen on a given socket but not have access to the file system. Now that SELinux is included in the Linux 2.6 kernel–and delivered by default in Fedora Core, Red Hat Enterprise Linux, and other major distributions–it's easier than ever to take advantage of its benefits. Security-Enhanced Linux (SELinux) is on this example I will be creating a simple samba share that should be able to access from any client within my network.