* [gentoo-commits] proj/hardened-docs:master commit in: html/, html/selinux/modules/, html/rsbac/, html/docs/, ...
@ 2011-07-09 17:10 Sven Vermeulen
0 siblings, 0 replies; only message in thread
From: Sven Vermeulen @ 2011-07-09 17:10 UTC (permalink / raw
To: gentoo-commits
commit: 25e01b75ea1aad126a9c04ca98d94b3df46e38d2
Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Sat Jul 9 17:08:51 2011 +0000
Commit: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
CommitDate: Sat Jul 9 17:08:51 2011 +0000
URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-docs.git;a=commit;h=25e01b75
update previews
---
html/docs/devel-chroots-intro.html | 3 +-
html/docs/glossary.html | 3 +-
html/docs/pax-howto.html | 3 +-
html/gnu-stack.html | 10 ++-
html/grsec-tpe.html | 3 +-
html/hardened-debugging.html | 3 +-
html/hardened-toolchain.html | 3 +-
html/hardened-virtualization.html | 3 +-
html/hardenedxorg.html | 2 +-
html/pax-quickstart.html | 3 +-
html/pax-utils.html | 7 +-
html/pic-guide.html | 3 +-
html/pic-internals.html | 3 +-
html/roadmap.html | 27 +++--
html/rsbac/intro.html | 3 +-
html/rsbac/overview.html | 3 +-
html/rsbac/quickstart.html | 3 +-
html/rsbac/transition.html | 3 +-
html/selinux-development.html | 3 +-
html/selinux-policy.html | 3 +-
html/selinux/hb-appendix-reference.html | 8 +-
html/selinux/hb-using-install.html | 2 +-
html/selinux/index.html | 6 -
html/selinux/modules/NFS | 5 +
html/selinux/modules/apache.html | 36 ++----
html/selinux/modules/bind.html | 156 ++++++++++++++++++++++++
html/selinux/modules/images/binddomain.png | Bin 0 -> 10588 bytes
html/selinux/modules/images/binddomain.svg | 4 +
html/selinux/modules/images/ldapdomain.png | Bin 0 -> 12588 bytes
html/selinux/modules/images/ldapdomain.svg | 4 +
html/selinux/modules/index.html | 9 +-
html/selinux/modules/{index.html => ldap.html} | 100 +++++++++++-----
html/selinux/modules/portage.html | 35 ++++--
html/selinux/selinux-handbook.html | 3 +-
html/toolchain-upgrade-guide.html | 3 +-
35 files changed, 330 insertions(+), 135 deletions(-)
diff --git a/html/docs/devel-chroots-intro.html b/html/docs/devel-chroots-intro.html
index 130c11d..fd6fd52 100644
--- a/html/docs/devel-chroots-intro.html
+++ b/html/docs/devel-chroots-intro.html
@@ -421,8 +421,7 @@ and opens up room for cutting down the necessary priviledges
of scripts and users for having their work done!
</p>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/docs/glossary.html b/html/docs/glossary.html
index 5e60a81..25ae194 100644
--- a/html/docs/glossary.html
+++ b/html/docs/glossary.html
@@ -122,8 +122,7 @@ Integrating this on a large scale, adding support to certain apps, and adding
rules so that lml can monitor other projects like SELinux.
</p>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/docs/pax-howto.html b/html/docs/pax-howto.html
index e2009d8..7fa11b0 100644
--- a/html/docs/pax-howto.html
+++ b/html/docs/pax-howto.html
@@ -228,8 +228,7 @@ Play around with disabling/enabling protections to see what is the least needed
to run.
</p>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/gnu-stack.html b/html/gnu-stack.html
index d784de3..72846bd 100644
--- a/html/gnu-stack.html
+++ b/html/gnu-stack.html
@@ -289,6 +289,12 @@ at the end of the source file, recompile, and do a jig.
%ifidn __OUTPUT_FORMAT__,elf
section .note.GNU-stack noalloc noexec nowrite progbits
%endif
+%ifidn __OUTPUT_FORMAT__,elf32
+section .note.GNU-stack noalloc noexec nowrite progbits
+%endif
+%ifidn __OUTPUT_FORMAT__,elf64
+section .note.GNU-stack noalloc noexec nowrite progbits
+%endif
</pre></td></tr>
</table>
<p class="secthead"><a name="doc_chap6_sect2">Compiling with --noexecstack</a></p>
@@ -397,7 +403,7 @@ If no one can seem to answer your question, give me a poke either on irc
</td>
<td width="1%" bgcolor="#dddaec" valign="top"><table border="0" cellspacing="4px" cellpadding="4px">
<tr><td class="topsep" align="center"><p class="altmenu"><a title="View a printer-friendly version" class="altlink" href="gnu-stack.xml?style=printable">Print</a></p></td></tr>
-<tr><td class="topsep" align="center"><p class="alttext">Updated March 17, 2011</p></td></tr>
+<tr><td class="topsep" align="center"><p class="alttext">Updated June 11, 2011</p></td></tr>
<tr><td class="topsep" align="left"><p class="alttext"><b>Summary: </b>Handbook for proper GNU Stack management in ELF systems</p></td></tr>
<tr><td align="left" class="topsep"><p class="alttext">
<a href="mailto:vapier@gentoo.org" class="altlink"><b>Mike Frysinger</b></a>
@@ -407,6 +413,8 @@ If no one can seem to answer your question, give me a poke either on irc
<a href="mailto:pageexec@freemail.hu" class="altlink"><b>The PaX team</b></a>
<br><i>Contributor</i><br><br>
<a href="mailto:kevquinn@gentoo.org" class="altlink"><b>Kevin F. Quinn</b></a>
+<br><i>Contributor</i><br><br>
+ <a href="mailto:klondike@gentoo.org" class="altlink"><b>klondike</b></a>
<br><i>Contributor</i><br></p></td></tr>
<tr lang="en"><td align="center" class="topsep">
<p class="alttext"><b>Donate</b> to support our development efforts.
diff --git a/html/grsec-tpe.html b/html/grsec-tpe.html
index 8a91b45..f30eac0 100644
--- a/html/grsec-tpe.html
+++ b/html/grsec-tpe.html
@@ -2643,8 +2643,7 @@ the ones of the executable itself, so an executable owned by other user can
still be modified by that user.
</p>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/hardened-debugging.html b/html/hardened-debugging.html
index ee89ada..224dc63 100644
--- a/html/hardened-debugging.html
+++ b/html/hardened-debugging.html
@@ -168,8 +168,7 @@ used <span class="code" dir="ltr">paxctl</span> you can reset the flags to defau
</pre></td></tr>
</table>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/hardened-toolchain.html b/html/hardened-toolchain.html
index 7fefc3c..76bf7f0 100644
--- a/html/hardened-toolchain.html
+++ b/html/hardened-toolchain.html
@@ -310,8 +310,7 @@ The following packages have issues with BIND_NOW at the time of writing, and it
<a href="http://people.redhat.com/drepper/dsohowto.pdf">How to Write Shared Libraries</a> by Ulrich Drepper (PDF)</li>
</ul>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/hardened-virtualization.html b/html/hardened-virtualization.html
index 2c3eed8..aadd0d6 100644
--- a/html/hardened-virtualization.html
+++ b/html/hardened-virtualization.html
@@ -132,8 +132,7 @@ KVM related resources:
Linux</a></li>
</ul>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/hardenedxorg.html b/html/hardenedxorg.html
index 3480e67..839b61d 100644
--- a/html/hardenedxorg.html
+++ b/html/hardenedxorg.html
@@ -70,7 +70,7 @@ Suggestion therefore is, to turn this option off by deselecting it in your confi
</p>
<p class="secthead"><a name="doc_chap2_sect2">CONFIG_GRKERNSEC_IO</a></p>
<p>
-Enabling this option will result in all ioperm(2) and iopl(2) calls returning an error messge. ioperm(2) and iopl(2) might be
+Enabling this option will result in all ioperm(2) and iopl(2) calls returning an error message. ioperm(2) and iopl(2) might be
used to modify the running kernel. As you wish to run a Xorg server on top of your hardened kernel (mostly GRsecurity), you'll
have to disable this config option, in order to get the XServer up and running.
</p>
diff --git a/html/pax-quickstart.html b/html/pax-quickstart.html
index ad3fc1b..7f88e0d 100644
--- a/html/pax-quickstart.html
+++ b/html/pax-quickstart.html
@@ -233,8 +233,7 @@ Play around with disabling/enabling protections to see what is the least needed
to run. Often we find that we need the -m -sp combos.
</p>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/pax-utils.html b/html/pax-utils.html
index 2fda7fd..1bfdaae 100644
--- a/html/pax-utils.html
+++ b/html/pax-utils.html
@@ -549,8 +549,8 @@ their Program Header. The following flags are supported:
<td class="tableinfo">X</td>
<td class="tableinfo">RANDEXEC</td>
<td class="tableinfo">
- Randomize the address where the application maps to to
- prevent certain attacks from being exploitable
+ Randomize the address where the application maps to prevent
+ certain attacks from being exploitable
</td>
</tr>
</table>
@@ -645,8 +645,7 @@ struct {
</pre></td></tr>
</table>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/pic-guide.html b/html/pic-guide.html
index 00b2ff7..843cb84 100644
--- a/html/pic-guide.html
+++ b/html/pic-guide.html
@@ -132,8 +132,7 @@ References:
</li>
</ul>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/pic-internals.html b/html/pic-internals.html
index aeded3e..2a8eb57 100644
--- a/html/pic-internals.html
+++ b/html/pic-internals.html
@@ -204,8 +204,7 @@ These executables simply do not need the PIC addressing mode for their functions
</ul>
<p>I would like to say personal thanks to the PaX team for supporting us with an extraordinary and outstanding commitment to our toolchain issues!</p>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/roadmap.html b/html/roadmap.html
index 804f4e8..25e8f71 100644
--- a/html/roadmap.html
+++ b/html/roadmap.html
@@ -255,9 +255,10 @@ is in need for attention.
</span>SELinux Goals and Milestones</p>
<p class="secthead"><a name="doc_chap6_sect1">Current State</a></p>
<p>
-The Gentoo Hardened SELinux state is, within the ~arch branches, up to date and
-fully supported (except MCS/MLS which is not supported yet). The documentation
-is being updated as the state evolves, but can still improve.
+The Gentoo Hardened SELinux state is up to date and fully supported (except
+MCS/MLS which is not supported yet). The documentation is being updated as
+the state evolves, but can still improve. Primary focus now is on the quality
+of the packages.
</p>
<p class="secthead"><a name="doc_chap6_sect2">Goals and Milestones</a></p>
<table class="ntable">
@@ -280,27 +281,27 @@ is being updated as the state evolves, but can still improve.
Stabilize the ~arch SELinux policies based on 2.20101213 upstream branch
</td>
<td class="tableinfo">2011-06-07</td>
- <td class="tableinfo"><span class="code-keyword">On track</span></td>
+ <td class="tableinfo">Done</td>
<td class="tableinfo">blueness, SwifT</td>
- <td class="tableinfo"><a href="https://bugs.gentoo.org/368199">#368199</a></td>
+ <td class="tableinfo"></td>
</tr>
<tr>
<td class="tableinfo">Improve QA on SELinux packages (f.i. migrate patchbundles away from filesdir)</td>
- <td class="tableinfo">2011-06-14</td>
+ <td class="tableinfo">2011-07-01</td>
<td class="tableinfo"><span class="code-keyword">On track</span></td>
- <td class="tableinfo">SwifT</td>
- <td class="tableinfo"></td>
+ <td class="tableinfo">blueness, SwifT</td>
+ <td class="tableinfo"><a href="https://bugs.gentoo.org/370927">#370927</a></td>
</tr>
<tr>
<td class="tableinfo">Stabilize the new SELinux profile structure</td>
- <td class="tableinfo">2011-06-28</td>
+ <td class="tableinfo">2011-07-15</td>
<td class="tableinfo"><span class="code-keyword">On track</span></td>
- <td class="tableinfo">blueness</td>
+ <td class="tableinfo">blueness, SwifT</td>
<td class="tableinfo"><a href="https://bugs.gentoo.org/365483">#365483</a></td>
</tr>
<tr>
<td class="tableinfo">Add support for MCS (driver is virtualization)</td>
- <td class="tableinfo">2011-07-15</td>
+ <td class="tableinfo">2011-08-01</td>
<td class="tableinfo"><span class="code-keyword">On track</span></td>
<td class="tableinfo">SwifT</td>
<td class="tableinfo"></td>
@@ -310,7 +311,7 @@ is being updated as the state evolves, but can still improve.
</td>
<td width="1%" bgcolor="#dddaec" valign="top"><table border="0" cellspacing="4px" cellpadding="4px">
<tr><td class="topsep" align="center"><p class="altmenu"><a title="View a printer-friendly version" class="altlink" href="roadmap.xml?style=printable">Print</a></p></td></tr>
-<tr><td class="topsep" align="center"><p class="alttext">Updated May 22, 2011</p></td></tr>
+<tr><td class="topsep" align="center"><p class="alttext">Updated June 13, 2011</p></td></tr>
<tr><td class="topsep" align="left"><p class="alttext"><b>Summary: </b>
A roadmap that plots current needs and goals of the
Hardened Gentoo project.
@@ -337,6 +338,8 @@ Hardened Gentoo project.
<a href="mailto:zorry@gentoo.org" class="altlink"><b>Magnus Granberg</b></a>
<br><i>Contributor</i><br><br>
<a href="mailto:blueness@gentoo.org" class="altlink"><b>Anthony G. Basile</b></a>
+<br><i>Contributor</i><br><br>
+ <a href="mailto:sven.vermeulen@siphos.be" class="altlink"><b>Sven Vermeulen</b></a>
<br><i>Contributor</i><br></p></td></tr>
<tr lang="en"><td align="center" class="topsep">
<p class="alttext"><b>Donate</b> to support our development efforts.
diff --git a/html/rsbac/intro.html b/html/rsbac/intro.html
index 8c6dc2b..c3dc5fe 100644
--- a/html/rsbac/intro.html
+++ b/html/rsbac/intro.html
@@ -67,8 +67,7 @@ ITSEC funtional criteria, extended by two privacy goals. </p>
<p> <a href="http://www.cs.kau.se/~simone/">http://www.cs.kau.se/~simone/</a>
</p>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/rsbac/overview.html b/html/rsbac/overview.html
index 3922ec8..1cdc38d 100644
--- a/html/rsbac/overview.html
+++ b/html/rsbac/overview.html
@@ -178,8 +178,7 @@ A general goal of RSBAC design has been to some day reach the (obsolete)
Orange Book (TCSEC) B1 level.
</p>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/rsbac/quickstart.html b/html/rsbac/quickstart.html
index 6045dcb..d03283a 100644
--- a/html/rsbac/quickstart.html
+++ b/html/rsbac/quickstart.html
@@ -309,8 +309,7 @@ Please also check the <a href="hardenedfaq.html">hardened FAQ</a> as your questi
<td class="tableinfo"><a href="irc://irc.freenode.org/rsbac">#rsbac</a></td>
</tr> </table>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/rsbac/transition.html b/html/rsbac/transition.html
index 725616c..b921bd6 100644
--- a/html/rsbac/transition.html
+++ b/html/rsbac/transition.html
@@ -48,8 +48,7 @@ Transition from rsbac-sources to hardened-sources </h1>
</pre></td></tr>
</table>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/selinux-development.html b/html/selinux-development.html
index 9767824..b028321 100644
--- a/html/selinux-development.html
+++ b/html/selinux-development.html
@@ -1218,8 +1218,7 @@ then install <span class="path" dir="ltr">sec-policy/selinux-base-policy-2.20101
it out.
</p>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/selinux-policy.html b/html/selinux-policy.html
index e7ce30a..63704fa 100644
--- a/html/selinux-policy.html
+++ b/html/selinux-policy.html
@@ -198,8 +198,7 @@ installations) and follow upstream strictly. It also keeps the naming
of the packages clean.
</p>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/selinux/hb-appendix-reference.html b/html/selinux/hb-appendix-reference.html
index 986c98f..3f27720 100644
--- a/html/selinux/hb-appendix-reference.html
+++ b/html/selinux/hb-appendix-reference.html
@@ -75,13 +75,7 @@ implementation.
<a href="selinux-faq.html">SELinux Frequently Asked
Questions</a>
</li>
- <li>
- <a href="selinux-development.html">SELinux Development
- Guidelines</a>
- </li>
- <li>
- <a href="selinux-policy.html">SELinux Policy</a>
- </li>
+
</ul>
</td>
<td width="1%" bgcolor="#dddaec" valign="top"><table border="0" cellspacing="4px" cellpadding="4px">
diff --git a/html/selinux/hb-using-install.html b/html/selinux/hb-using-install.html
index acbdbe2..7f97812 100644
--- a/html/selinux/hb-using-install.html
+++ b/html/selinux/hb-using-install.html
@@ -144,7 +144,7 @@ particular order which Portage isn't aware of in the next couple of sections.
</p>
<p class="secthead"><a name="doc_chap1_sect1">Update make.conf</a></p>
<p>
-Edit your <span class="path" dir="ltr">/etc/make.conf</span> file. If you ues the older SELinux
+Edit your <span class="path" dir="ltr">/etc/make.conf</span> file. If you use the older SELinux
profiles (like <span class="path" dir="ltr">selinux/v2refpolicy/amd64/hardened</span>), set
<span class="code" dir="ltr">FEATURES="-loadpolicy"</span>. These SELinux profiles enable the
loadpolicy feature, but this isn't supported anymore so can be safely ignored.
diff --git a/html/selinux/index.html b/html/selinux/index.html
index ed9d56a..d8a0c2c 100644
--- a/html/selinux/index.html
+++ b/html/selinux/index.html
@@ -176,12 +176,6 @@ Develop and maintain SELinux documentation specific to the Gentoo distribution
<a href="selinux-faq.html">Gentoo SELinux FAQ</a>
</li>
<li>
- <a href="selinux-development.html">Gentoo Hardened SELinux Development</a>
- </li>
- <li>
- <a href="selinux-policy.html">Gentoo Hardened SELinux Development Policy</a>
- </li>
- <li>
<a href="roadmap.html">Gentoo Hardened Roadmap (incl. SELinux development)</a>
</li>
<li>
diff --git a/html/selinux/modules/NFS b/html/selinux/modules/NFS
new file mode 100644
index 0000000..aa87288
--- /dev/null
+++ b/html/selinux/modules/NFS
@@ -0,0 +1,5 @@
+Important doclet:
+- if mounting multiple locations with different context= options, but the
+ master file system (on the NFS server) is the same file system, then the
+ mount must use "nosharecache" as an option (IPv4)
+
diff --git a/html/selinux/modules/apache.html b/html/selinux/modules/apache.html
index 76d38cb..3b8f7f3 100644
--- a/html/selinux/modules/apache.html
+++ b/html/selinux/modules/apache.html
@@ -325,23 +325,6 @@ base it on the description instead.
<td class="tableinfo">system_u:object_r:httpd_user_script_exec_t</td>
</tr>
</table>
-<p>
-If you use different locations, use the following commands to update the file
-contexts accordingly:
-</p>
-<a name="doc_chap2_pre1"></a><table class="ntable" width="100%" cellspacing="0" cellpadding="0" border="0">
-<tr><td bgcolor="#7a5ada"><p class="codetitle">Code Listing2.1: Updating file contexts</p></td></tr>
-<tr><td bgcolor="#eeeeff" align="left" dir="ltr"><pre>
-<span class="code-comment">( Example for a different PORTDIR location, say /var/repo/portage )</span>
-~# <span class="code-input">semanage -a -t portage_ebuild_t /var/repo/portage</span>
-~# <span class="code-input">restorecon -R /var/repo/portage</span>
-</pre></td></tr>
-</table>
-<p>
-Don't forget that Portage uses subdirectories with different labels (think
-distfiles or the repositories for the live ebuilds) so take care when
-relabeling locations!
-</p>
<p class="secthead"><a name="doc_chap2_sect2">Sharing Files</a></p>
<p>
The SELinux policy (as part of the <span class="code" dir="ltr">miscfiles</span> module) supports two
@@ -357,8 +340,8 @@ For instance, if you have files that are shared by Apache, NFS, Samba, ... you
label these <span class="code" dir="ltr">public_content_t</span> (read-only) or <span class="code" dir="ltr">public_content_rw_t</span>
(read-write for some) and then toggle the appropriate booleans:
</p>
-<a name="doc_chap2_pre2"></a><table class="ntable" width="100%" cellspacing="0" cellpadding="0" border="0">
-<tr><td bgcolor="#7a5ada"><p class="codetitle">Code Listing2.2: Enable write access for the httpd_sys_script_t domain to the public_content_rw_t domain</p></td></tr>
+<a name="doc_chap2_pre1"></a><table class="ntable" width="100%" cellspacing="0" cellpadding="0" border="0">
+<tr><td bgcolor="#7a5ada"><p class="codetitle">Code Listing2.1: Enable write access for the httpd_sys_script_t domain to the public_content_rw_t domain</p></td></tr>
<tr><td bgcolor="#eeeeff" align="left" dir="ltr"><pre>
~# <span class="code-input">setsebool -P allow_httpd_sys_script_anon_write on</span>
</pre></td></tr>
@@ -526,8 +509,8 @@ toggle these booleans as well.
<p>
If you want to toggle booleans, you can do so through <span class="code" dir="ltr">setsebool</span>:
</p>
-<a name="doc_chap2_pre3"></a><table class="ntable" width="100%" cellspacing="0" cellpadding="0" border="0">
-<tr><td bgcolor="#7a5ada"><p class="codetitle">Code Listing2.3: Enabling the gentoo_try_dontaudit boolean</p></td></tr>
+<a name="doc_chap2_pre2"></a><table class="ntable" width="100%" cellspacing="0" cellpadding="0" border="0">
+<tr><td bgcolor="#7a5ada"><p class="codetitle">Code Listing2.2: Enabling the gentoo_try_dontaudit boolean</p></td></tr>
<tr><td bgcolor="#eeeeff" align="left" dir="ltr"><pre>
<span class="code-comment">( With the -P flag, the boolean state is persisted across reboots)</span>
~# <span class="code-input">setsebool -P httpd_enable_homedirs on</span>
@@ -542,8 +525,8 @@ it to bind to the specified port.
<p>
To mark a particular port (say 81) as an HTTP port, use <span class="code" dir="ltr">semanage</span>:
</p>
-<a name="doc_chap2_pre4"></a><table class="ntable" width="100%" cellspacing="0" cellpadding="0" border="0">
-<tr><td bgcolor="#7a5ada"><p class="codetitle">Code Listing2.4: Labeling port 81 as http_port_t</p></td></tr>
+<a name="doc_chap2_pre3"></a><table class="ntable" width="100%" cellspacing="0" cellpadding="0" border="0">
+<tr><td bgcolor="#7a5ada"><p class="codetitle">Code Listing2.3: Labeling port 81 as http_port_t</p></td></tr>
<tr><td bgcolor="#eeeeff" align="left" dir="ltr"><pre>
~# <span class="code-input">semanage port -a -t http_port_t -p tcp 81</span>
</pre></td></tr>
@@ -554,15 +537,14 @@ modify that ports' type, you'll need to create a policy that allows the
<span class="code" dir="ltr">httpd_t</span> domain to bind to the particular port. For instance, to allow it
to bind on the SMTP port:
</p>
-<a name="doc_chap2_pre5"></a><table class="ntable" width="100%" cellspacing="0" cellpadding="0" border="0">
-<tr><td bgcolor="#7a5ada"><p class="codetitle">Code Listing2.5: Allow rules to allow httpd_t to bind on SMTP ports</p></td></tr>
+<a name="doc_chap2_pre4"></a><table class="ntable" width="100%" cellspacing="0" cellpadding="0" border="0">
+<tr><td bgcolor="#7a5ada"><p class="codetitle">Code Listing2.4: Allow rules to allow httpd_t to bind on SMTP ports</p></td></tr>
<tr><td bgcolor="#eeeeff" align="left" dir="ltr"><pre>
allow httpd_t smtp_port_t:tcp_socket name_bind;
</pre></td></tr>
</table>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/selinux/modules/bind.html b/html/selinux/modules/bind.html
new file mode 100644
index 0000000..522f2a4
--- /dev/null
+++ b/html/selinux/modules/bind.html
@@ -0,0 +1,156 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
+<html lang="en">
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
+<link title="new" rel="stylesheet" href="http://www.gentoo.org/../../css/main.css" type="text/css">
+<link REL="shortcut icon" HREF="http://www.gentoo.org/../../favicon.ico" TYPE="image/x-icon">
+<link rel="search" type="application/opensearchdescription+xml" href="http://www.gentoo.org/search/www-gentoo-org.xml" title="Gentoo Website">
+<link rel="search" type="application/opensearchdescription+xml" href="http://www.gentoo.org/search/forums-gentoo-org.xml" title="Gentoo Forums">
+<link rel="search" type="application/opensearchdescription+xml" href="http://www.gentoo.org/search/bugs-gentoo-org.xml" title="Gentoo Bugzilla">
+<link rel="search" type="application/opensearchdescription+xml" href="http://www.gentoo.org/search/packages-gentoo-org.xml" title="Gentoo Packages">
+<link rel="search" type="application/opensearchdescription+xml" href="http://www.gentoo.org/search/archives-gentoo-org.xml" title="Gentoo List Archives">
+<title>Gentoo Linux Documentation
+--
+ SELinux Bind Module</title>
+</head>
+<body style="margin:0px;" bgcolor="#ffffff"><table width="100%" border="0" cellspacing="0" cellpadding="0">
+<tr><td valign="top" height="125" bgcolor="#45347b"><a href="http://www.gentoo.org/"><img border="0" src="http://www.gentoo.org/../../images/gtop-www.jpg" alt="Gentoo Logo"></a></td></tr>
+<tr><td valign="top" align="right" colspan="1" bgcolor="#ffffff"><table border="0" cellspacing="0" cellpadding="0" width="100%"><tr>
+<td width="99%" class="content" valign="top" align="left">
+<br><h1>SELinux Bind Module</h1>
+<form name="contents" action="http://www.gentoo.org">
+<b>Content</b>:
+ <select name="url" size="1" OnChange="location.href=form.url.options[form.url.selectedIndex].value" style="font-family:sans-serif,Arial,Helvetica"><option value="#doc_chap1">1. Structure</option>
+<option value="#doc_chap2">2. Using Bind</option></select>
+</form>
+<p class="chaphead"><a name="doc_chap1"></a><span class="chapnum">1.
+ </span>Structure</p>
+<p class="secthead"><a name="doc_chap1_sect1">Domains</a></p>
+<br><a name="doc_chap1_fig1"></a><table cellspacing="0" cellpadding="0" border="0">
+<tr><td bgcolor="#7a5ada"><p class="codetitle">Figure1.1: General Bind domain overview</p></td></tr>
+<tr><td align="center" bgcolor="#ddddff"><img src="./images/binddomain.png" alt="Fig. 1: General Bind domain overview"></td></tr>
+</table>
+<br><p>
+The <span class="code" dir="ltr">named_t</span> domain can only be transitioned towards through the
+<span class="code" dir="ltr">initrc_t</span> domain (i.e. through init scripts). The <span class="code" dir="ltr">ndc_t</span> domain
+(for the named domain controller) can be transitioned towards through the
+<span class="code" dir="ltr">initrc_t</span> and <span class="code" dir="ltr">sysadm_t</span> (general system administration) domains.
+</p>
+<p class="secthead"><a name="doc_chap1_sect2">File Types/Labels</a></p>
+<p>
+The following table lists the file type/labels defined in the <span class="code" dir="ltr">bind</span>
+module.
+</p>
+<table class="ntable">
+<tr>
+ <td class="infohead"><b>Type</b></td>
+ <td class="infohead"><b>Function</b></td>
+ <td class="infohead"><b>Description</b></td>
+</tr>
+<tr>
+ <td class="tableinfo">named_exec_t</td>
+ <td class="tableinfo">Entrypoint</td>
+ <td class="tableinfo">Entrypoint domain for the named binaries</td>
+</tr>
+<tr>
+ <td class="tableinfo">named_initrc_exec_t</td>
+ <td class="tableinfo">Entrypoint</td>
+ <td class="tableinfo">Entrypoint domain for non-Gentoo init scripts</td>
+</tr>
+<tr>
+ <td class="tableinfo">named_checkconf_exec_t</td>
+ <td class="tableinfo">Entrypoint</td>
+ <td class="tableinfo">Entrypoint for the checkconf binary</td>
+</tr>
+<tr>
+ <td class="tableinfo">ndc_exec_t</td>
+ <td class="tableinfo">Entrypoint</td>
+ <td class="tableinfo">Entrypoint for the ndc binaries</td>
+</tr>
+<tr>
+ <td class="tableinfo">dnssec_t</td>
+ <td class="tableinfo">Configuration</td>
+ <td class="tableinfo">Label for the key files used by the named daemon</td>
+</tr>
+<tr>
+ <td class="tableinfo">named_zone_t</td>
+ <td class="tableinfo">Configuration</td>
+ <td class="tableinfo">Label for the primary zone files</td>
+</tr>
+<tr>
+ <td class="tableinfo">named_cache_t</td>
+ <td class="tableinfo">Configuration</td>
+ <td class="tableinfo">Label for the cached zone files</td>
+</tr>
+<tr>
+ <td class="tableinfo">named_conf_t</td>
+ <td class="tableinfo">Configuration</td>
+ <td class="tableinfo">Label for the named configuration files</td>
+</tr>
+<tr>
+ <td class="tableinfo">named_log_t</td>
+ <td class="tableinfo">Configuration</td>
+ <td class="tableinfo">Label for the named log files</td>
+</tr>
+<tr>
+ <td class="tableinfo">named_tmp_t</td>
+ <td class="tableinfo"></td>
+ <td class="tableinfo">Label for the named temporary files</td>
+</tr>
+<tr>
+ <td class="tableinfo">named_var_run_t</td>
+ <td class="tableinfo"></td>
+ <td class="tableinfo">Label for the named runtime variable data</td>
+</tr>
+</table>
+<p class="chaphead"><a name="doc_chap2"></a><span class="chapnum">2.
+ </span>Using Bind</p>
+<p class="secthead"><a name="doc_chap2_sect1">SELinux boolean: named_write_master_zones</a></p>
+<p>
+The <span class="code" dir="ltr">named</span> policy offers one boolean called
+<span class="code" dir="ltr">named_write_master_zones</span> which, when enabled, allows the named daemon to
+write to its master zone files (i.e. <span class="code" dir="ltr">named_zone_t</span>). This is used in
+master/slave setups.
+</p>
+<br><p class="copyright">
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
+ </p>
+<!--
+ <rdf:RDF xmlns="http://web.resource.org/cc/"
+ xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">
+ <License rdf:about="http://creativecommons.org/licenses/by-sa/2.5/">
+ <permits rdf:resource="http://web.resource.org/cc/Reproduction" />
+ <permits rdf:resource="http://web.resource.org/cc/Distribution" />
+ <requires rdf:resource="http://web.resource.org/cc/Notice" />
+ <requires rdf:resource="http://web.resource.org/cc/Attribution" />
+ <permits rdf:resource="http://web.resource.org/cc/DerivativeWorks" />
+ <requires rdf:resource="http://web.resource.org/cc/ShareAlike" />
+ </License>
+ </rdf:RDF>
+--><br>
+</td>
+<td width="1%" bgcolor="#dddaec" valign="top"><table border="0" cellspacing="4px" cellpadding="4px">
+<tr><td class="topsep" align="center"><p class="altmenu"><a title="View a printer-friendly version" class="altlink" href="selinux/modules/apache.xml?style=printable">Print</a></p></td></tr>
+<tr><td class="topsep" align="center"><p class="alttext">Updated July 9, 2011</p></td></tr>
+<tr><td class="topsep" align="left"><p class="alttext"><b>Summary: </b>
+Within SELinux, the bind module is responsible for defining the BIND
+domains and interactions.
+</p></td></tr>
+<tr><td align="left" class="topsep"><p class="alttext">
+ <a href="mailto:sven.vermeulen@siphos.be" class="altlink"><b>Sven Vermeulen</b></a>
+<br><i>Author</i><br></p></td></tr>
+<tr lang="en"><td align="center" class="topsep">
+<p class="alttext"><b>Donate</b> to support our development efforts.
+ </p>
+<form action="https://www.paypal.com/cgi-bin/webscr" method="post">
+<input type="hidden" name="cmd" value="_xclick"><input type="hidden" name="business" value="paypal@gentoo.org"><input type="hidden" name="item_name" value="Gentoo Linux Support"><input type="hidden" name="item_number" value="1000"><input type="hidden" name="image_url" value="http://www.gentoo.org/images/paypal.png"><input type="hidden" name="no_shipping" value="1"><input type="hidden" name="return" value="http://www.gentoo.org"><input type="hidden" name="cancel_return" value="http://www.gentoo.org"><input type="image" src="http://images.paypal.com/images/x-click-but21.gif" name="submit" alt="Donate to Gentoo">
+</form>
+</td></tr>
+<tr lang="en"><td align="center"><iframe src="http://sidebar.gentoo.org" scrolling="no" width="125" height="850" frameborder="0" style="border:0px padding:0x" marginwidth="0" marginheight="0"><p>Your browser does not support iframes.</p></iframe></td></tr>
+</table></td>
+</tr></table></td></tr>
+<tr><td colspan="2" align="right" class="infohead">
+Copyright 2001-2011 Gentoo Foundation, Inc. Questions, Comments? <a class="highlight" href="http://www.gentoo.org/main/en/contact.xml">Contact us</a>.
+</td></tr>
+</table></body>
+</html>
diff --git a/html/selinux/modules/images/binddomain.png b/html/selinux/modules/images/binddomain.png
new file mode 100644
index 0000000..3a75402
Binary files /dev/null and b/html/selinux/modules/images/binddomain.png differ
diff --git a/html/selinux/modules/images/binddomain.svg b/html/selinux/modules/images/binddomain.svg
new file mode 100644
index 0000000..f443429
--- /dev/null
+++ b/html/selinux/modules/images/binddomain.svg
@@ -0,0 +1,4 @@
+<?xml version="1.0" standalone="yes"?>
+
+<svg version="1.1" viewBox="0.0 0.0 1056.0 511.0" fill="none" stroke="none" stroke-linecap="square" stroke-miterlimit="10" clip-path="url(#clip0)" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="clip0"><path d="M0 0L1056.0 0L1056.0 511.0L0 511.0L0 0Z" clip-rule="nonzero"></path></clipPath><path d="M57.53727 77.66929L266.0097 77.66929L266.0097 149.35432L57.53727 149.35432Z" fill-rule="nonzero" fill="#cfe2f3" stroke="#073763" stroke-width="2.0" stroke-linejoin="round" stroke-linecap="butt"></path><path d="M126.709145 119.99741L126.709145 110.13804L128.20914 110.13804L128.20914 111.54429Q129.30289 109.91929 131.34976 109.91929Q132.24039 109.91929 132.99039 110.2396Q133.74039 110.55991 134.10757 111.08335Q134.47476 111.60679 134.63101 112.30991Q134.72476 112.77866 134.72476 113.93491L134.72476 119.99741L133.05289 119.99741L133.05289 113.99741Q133.05289 112.98179 132.85757 112.473976Q132.66226 111.96616 132.16226 111.66929Q131.66226 111
.37241 130.99039 111.37241Q129.92789 111.37241 129.15445 112.04429Q128.38101 112.71616 128.38101 114.62241L128.38101 119.99741L126.709145 119.99741ZM143.52164 118.77866Q142.58414 119.57554 141.72476 119.89585Q140.86539 120.21616 139.88101 120.21616Q138.27164 120.21616 137.39664 119.4271Q136.52164 118.63804 136.52164 117.40366Q136.52164 116.66929 136.84976 116.07554Q137.17789 115.48179 137.70914 115.12241Q138.24039 114.76304 138.91226 114.57554Q139.41226 114.43491 140.39664 114.32554Q142.42789 114.07554 143.38101 113.74741Q143.38101 113.40366 143.38101 113.30991Q143.38101 112.29429 142.91226 111.87241Q142.27164 111.30991 141.00601 111.30991Q139.83414 111.30991 139.27164 111.71616Q138.70914 112.12241 138.44351 113.18491L136.80289 112.95054Q137.03726 111.90366 137.54507 111.26304Q138.05289 110.62241 139.01382 110.27085Q139.97476 109.91929 141.25601 109.91929Q142.52164 109.91929 143.30289 110.21616Q144.08414 110.51304 144.45914 110.96616Q144.83414 111.41929 144.97476 112.10679Q1
45.06851 112.52866 145.06851 113.63804L145.06851 115.87241Q145.06851 118.20054 145.17007 118.817726Q145.27164 119.43491 145.59976 119.99741L143.84976 119.99741Q143.58414 119.48179 143.52164 118.77866ZM143.38101 115.05991Q142.47476 115.41929 140.64664 115.68491Q139.61539 115.82554 139.19351 116.01304Q138.77164 116.20054 138.53726 116.55991Q138.30289 116.91929 138.30289 117.35679Q138.30289 118.02866 138.8107 118.473976Q139.31851 118.91929 140.28726 118.91929Q141.25601 118.91929 142.00601 118.4896Q142.75601 118.05991 143.11539 117.34116Q143.38101 116.76304 143.38101 115.66929L143.38101 115.05991ZM147.45914 119.99741L147.45914 110.13804L148.95914 110.13804L148.95914 111.52866Q149.41226 110.80991 150.1857 110.3646Q150.95914 109.91929 151.94351 109.91929Q153.03726 109.91929 153.74039 110.37241Q154.44351 110.82554 154.72476 111.65366Q155.89664 109.91929 157.77164 109.91929Q159.24039 109.91929 160.02945 110.73179Q160.81851 111.54429 160.81851 113.23179L160.81851 119.99741L159.14664
119.99741L159.14664 113.79429Q159.14664 112.79429 158.99039 112.348976Q158.83414 111.90366 158.40445 111.63804Q157.97476 111.37241 157.39664 111.37241Q156.36539 111.37241 155.67789 112.05991Q154.99039 112.74741 154.99039 114.27866L154.99039 119.99741L153.31851 119.99741L153.31851 113.59116Q153.31851 112.48179 152.91226 111.9271Q152.50601 111.37241 151.56851 111.37241Q150.86539 111.37241 150.26382 111.7396Q149.66226 112.10679 149.39664 112.82554Q149.13101 113.54429 149.13101 114.88804L149.13101 119.99741L147.45914 119.99741ZM169.75601 116.82554L171.47476 117.04429Q171.06851 118.54429 169.96695 119.380226Q168.86539 120.21616 167.14664 120.21616Q164.99039 120.21616 163.72476 118.88804Q162.45914 117.55991 162.45914 115.15366Q162.45914 112.66929 163.73257 111.29429Q165.00601 109.91929 167.05289 109.91929Q169.03726 109.91929 170.28726 111.26304Q171.53726 112.60679 171.53726 115.05991Q171.53726 115.20054 171.52164 115.49741L164.17789 115.49741Q164.27164 117.12241 165.09976 117.9817
9Q165.92789 118.84116 167.16226 118.84116Q168.06851 118.84116 168.71695 118.3646Q169.36539 117.88804 169.75601 116.82554ZM164.27164 114.12241L169.77164 114.12241Q169.66226 112.88804 169.14664 112.26304Q168.34976 111.29429 167.06851 111.29429Q165.92789 111.29429 165.13882 112.067726Q164.34976 112.84116 164.27164 114.12241ZM179.77164 119.99741L179.77164 118.74741Q178.83414 120.21616 177.02164 120.21616Q175.84976 120.21616 174.85757 119.567726Q173.86539 118.91929 173.32632 117.755226Q172.78726 116.59116 172.78726 115.07554Q172.78726 113.60679 173.27945 112.40366Q173.77164 111.20054 174.7482 110.55991Q175.72476 109.91929 176.94351 109.91929Q177.83414 109.91929 178.52945 110.29429Q179.22476 110.66929 179.66226 111.27866L179.66226 106.40366L181.31851 106.40366L181.31851 119.99741L179.77164 119.99741ZM174.49039 115.07554Q174.49039 116.96616 175.29507 117.90366Q176.09976 118.84116 177.17789 118.84116Q178.27164 118.84116 179.03726 117.95054Q179.80289 117.05991 179.80289 115.21616Q179
.80289 113.20054 179.02164 112.255226Q178.24039 111.30991 177.09976 111.30991Q175.99039 111.30991 175.24039 112.21616Q174.49039 113.12241 174.49039 115.07554ZM182.22476 123.77866L182.22476 122.55991L193.28726 122.55991L193.28726 123.77866L182.22476 123.77866ZM197.78726 118.49741L198.02164 119.98179Q197.31851 120.12241 196.75601 120.12241Q195.84976 120.12241 195.34976 119.83335Q194.84976 119.54429 194.64664 119.08335Q194.44351 118.62241 194.44351 117.10679L194.44351 111.45054L193.20914 111.45054L193.20914 110.13804L194.44351 110.13804L194.44351 107.70054L196.09976 106.70054L196.09976 110.13804L197.78726 110.13804L197.78726 111.45054L196.09976 111.45054L196.09976 117.20054Q196.09976 117.91929 196.1857 118.12241Q196.27164 118.32554 196.47476 118.45054Q196.67789 118.57554 197.05289 118.57554Q197.31851 118.57554 197.78726 118.49741Z" fill-rule="nonzero" fill="#000000"></path><path d="M429.02545 77.66929L637.4979 77.66929L637.4979 149.35432L429.02545 149.35432Z" fill-rule="nonzero
" fill="#ffe599" stroke="#073763" stroke-width="2.0" stroke-linejoin="round" stroke-linecap="butt"></path><path d="M507.04108 108.30991L507.04108 106.40366L508.71295 106.40366L508.71295 108.30991L507.04108 108.30991ZM507.04108 119.99741L507.04108 110.13804L508.71295 110.13804L508.71295 119.99741L507.04108 119.99741ZM511.1817 119.99741L511.1817 110.13804L512.6817 110.13804L512.6817 111.54429Q513.77545 109.91929 515.8223 109.91929Q516.71295 109.91929 517.46295 110.2396Q518.21295 110.55991 518.58014 111.08335Q518.9473 111.60679 519.1036 112.30991Q519.1973 112.77866 519.1973 113.93491L519.1973 119.99741L517.52545 119.99741L517.52545 113.99741Q517.52545 112.98179 517.33014 112.473976Q517.1348 111.96616 516.6348 111.66929Q516.1348 111.37241 515.46295 111.37241Q514.40045 111.37241 513.627 112.04429Q512.8536 112.71616 512.8536 114.62241L512.8536 119.99741L511.1817 119.99741ZM521.5723 108.30991L521.5723 106.40366L523.2442 106.40366L523.2442 108.30991L521.5723 108.30991ZM521.5723 119.
99741L521.5723 110.13804L523.2442 110.13804L523.2442 119.99741L521.5723 119.99741ZM529.3536 118.49741L529.58795 119.98179Q528.8848 120.12241 528.3223 120.12241Q527.4161 120.12241 526.9161 119.83335Q526.4161 119.54429 526.21295 119.08335Q526.0098 118.62241 526.0098 117.10679L526.0098 111.45054L524.77545 111.45054L524.77545 110.13804L526.0098 110.13804L526.0098 107.70054L527.6661 106.70054L527.6661 110.13804L529.3536 110.13804L529.3536 111.45054L527.6661 111.45054L527.6661 117.20054Q527.6661 117.91929 527.752 118.12241Q527.83795 118.32554 528.0411 118.45054Q528.2442 118.57554 528.6192 118.57554Q528.8848 118.57554 529.3536 118.49741ZM530.8692 119.99741L530.8692 110.13804L532.3692 110.13804L532.3692 111.63804Q532.9473 110.59116 533.4317 110.255226Q533.9161 109.91929 534.5098 109.91929Q535.3536 109.91929 536.2286 110.46616L535.65045 112.01304Q535.0411 111.65366 534.4161 111.65366Q533.8692 111.65366 533.4395 111.98179Q533.0098 112.30991 532.8223 112.88804Q532.5411 113.77866 532.54
11 114.84116L532.5411 119.99741L530.8692 119.99741ZM543.52545 116.38804L545.1661 116.60679Q544.90045 118.29429 543.7911 119.255226Q542.6817 120.21616 541.0567 120.21616Q539.0411 120.21616 537.8145 118.89585Q536.58795 117.57554 536.58795 115.10679Q536.58795 113.51304 537.1114 112.317726Q537.6348 111.12241 538.72076 110.52085Q539.8067 109.91929 541.0723 109.91929Q542.6817 109.91929 543.6973 110.73179Q544.71295 111.54429 545.0098 113.04429L543.3848 113.29429Q543.15045 112.29429 542.5567 111.79429Q541.96295 111.29429 541.1348 111.29429Q539.8692 111.29429 539.08014 112.20054Q538.2911 113.10679 538.2911 115.05991Q538.2911 117.04429 539.0567 117.942726Q539.8223 118.84116 541.0411 118.84116Q542.02545 118.84116 542.6817 118.2396Q543.33795 117.63804 543.52545 116.38804ZM544.8848 123.77866L544.8848 122.55991L555.9473 122.55991L555.9473 123.77866L544.8848 123.77866ZM560.4473 118.49741L560.6817 119.98179Q559.9786 120.12241 559.4161 120.12241Q558.5098 120.12241 558.0098 119.83335Q557.5098
119.54429 557.3067 119.08335Q557.1036 118.62241 557.1036 117.10679L557.1036 111.45054L555.8692 111.45054L555.8692 110.13804L557.1036 110.13804L557.1036 107.70054L558.7598 106.70054L558.7598 110.13804L560.4473 110.13804L560.4473 111.45054L558.7598 111.45054L558.7598 117.20054Q558.7598 117.91929 558.84576 118.12241Q558.9317 118.32554 559.1348 118.45054Q559.33795 118.57554 559.71295 118.57554Q559.9786 118.57554 560.4473 118.49741Z" fill-rule="nonzero" fill="#000000"></path><path d="M429.02548 113.51181L278.0097 113.51181" fill-rule="evenodd" stroke="#073763" stroke-width="2.0" stroke-linejoin="round" stroke-linecap="butt"></path><path d="M278.0097 110.20834L268.9335 113.51181L278.0097 116.81528Z" fill-rule="evenodd" fill="#073763" stroke="#073763" stroke-width="2.0" stroke-linecap="butt"></path><path d="M57.53727 231.64568L266.0097 231.64568L266.0097 303.33072L57.53727 303.33072Z" fill-rule="nonzero" fill="#cfe2f3" stroke="#073763" stroke-width="2.0" stroke-linejoin="round" st
roke-linecap="butt"></path><path d="M140.19351 273.9738L140.19351 264.1144L141.69351 264.1144L141.69351 265.52066Q142.78726 263.89566 144.83414 263.89566Q145.72476 263.89566 146.47476 264.21597Q147.22476 264.5363 147.59195 265.05972Q147.95914 265.58316 148.11539 266.2863Q148.20914 266.75504 148.20914 267.9113L148.20914 273.9738L146.53726 273.9738L146.53726 267.9738Q146.53726 266.95816 146.34195 266.45035Q146.14664 265.94254 145.64664 265.64566Q145.14664 265.3488 144.47476 265.3488Q143.41226 265.3488 142.63882 266.02066Q141.86539 266.69254 141.86539 268.5988L141.86539 273.9738L140.19351 273.9738ZM156.95914 273.9738L156.95914 272.7238Q156.02164 274.19254 154.20914 274.19254Q153.03726 274.19254 152.04507 273.5441Q151.05289 272.89566 150.51382 271.7316Q149.97476 270.56754 149.97476 269.0519Q149.97476 267.58316 150.46695 266.38004Q150.95914 265.1769 151.9357 264.5363Q152.91226 263.89566 154.13101 263.89566Q155.02164 263.89566 155.71695 264.27066Q156.41226 264.64566 156.84976 265.
25504L156.84976 260.38004L158.50601 260.38004L158.50601 273.9738L156.95914 273.9738ZM151.67789 269.0519Q151.67789 270.94254 152.48257 271.88004Q153.28726 272.81754 154.36539 272.81754Q155.45914 272.81754 156.22476 271.9269Q156.99039 271.0363 156.99039 269.19254Q156.99039 267.1769 156.20914 266.2316Q155.42789 265.2863 154.28726 265.2863Q153.17789 265.2863 152.42789 266.19254Q151.67789 267.0988 151.67789 269.0519ZM167.38101 270.3644L169.02164 270.58316Q168.75601 272.27066 167.64664 273.2316Q166.53726 274.19254 164.91226 274.19254Q162.89664 274.19254 161.67007 272.87222Q160.44351 271.5519 160.44351 269.08316Q160.44351 267.4894 160.96695 266.2941Q161.49039 265.0988 162.57632 264.49722Q163.66226 263.89566 164.92789 263.89566Q166.53726 263.89566 167.55289 264.70816Q168.56851 265.52066 168.86539 267.02066L167.24039 267.27066Q167.00601 266.27066 166.41226 265.77066Q165.81851 265.27066 164.99039 265.27066Q163.72476 265.27066 162.9357 266.1769Q162.14664 267.08316 162.14664 269.0363Q16
2.14664 271.02066 162.91226 271.9191Q163.67789 272.81754 164.89664 272.81754Q165.88101 272.81754 166.53726 272.21597Q167.19351 271.6144 167.38101 270.3644ZM168.74039 277.75504L168.74039 276.5363L179.80289 276.5363L179.80289 277.75504L168.74039 277.75504ZM184.30289 272.4738L184.53726 273.95816Q183.83414 274.0988 183.27164 274.0988Q182.36539 274.0988 181.86539 273.80972Q181.36539 273.52066 181.16226 273.05972Q180.95914 272.5988 180.95914 271.08316L180.95914 265.4269L179.72476 265.4269L179.72476 264.1144L180.95914 264.1144L180.95914 261.6769L182.61539 260.6769L182.61539 264.1144L184.30289 264.1144L184.30289 265.4269L182.61539 265.4269L182.61539 271.1769Q182.61539 271.89566 182.70132 272.0988Q182.78726 272.3019 182.99039 272.4269Q183.19351 272.5519 183.56851 272.5519Q183.83414 272.5519 184.30289 272.4738Z" fill-rule="nonzero" fill="#000000"></path><path d="M429.02545 231.64568L637.4979 231.64568L637.4979 303.33072L429.02545 303.33072Z" fill-rule="nonzero" fill="#ffe599" stroke="
#073763" stroke-width="2.0" stroke-linejoin="round" stroke-linecap="butt"></path><path d="M493.91608 271.0363L495.57233 270.77066Q495.71295 271.77066 496.34576 272.2941Q496.97858 272.81754 498.1192 272.81754Q499.27545 272.81754 499.83014 272.3488Q500.38483 271.88004 500.38483 271.25504Q500.38483 270.69254 499.90045 270.3644Q499.5567 270.14566 498.19733 269.8019Q496.35358 269.33316 495.64264 268.99722Q494.9317 268.6613 494.5645 268.05972Q494.19733 267.45816 494.19733 266.7394Q494.19733 266.08316 494.502 265.52066Q494.8067 264.95816 495.32233 264.58316Q495.71295 264.3019 496.38483 264.0988Q497.0567 263.89566 497.82233 263.89566Q498.9942 263.89566 499.8692 264.2316Q500.7442 264.56754 501.15826 265.13785Q501.57233 265.70816 501.72858 266.6613L500.10358 266.88004Q499.9942 266.13004 499.45514 265.70035Q498.91608 265.27066 497.94733 265.27066Q496.79108 265.27066 496.3067 265.65347Q495.82233 266.0363 495.82233 266.5363Q495.82233 266.8644 496.02545 267.13004Q496.22858 267.39566 496.6
6608 267.56754Q496.91608 267.6613 498.13483 268.00504Q499.90045 268.4738 500.60358 268.77066Q501.3067 269.06754 501.70514 269.64566Q502.10358 270.2238 502.10358 271.08316Q502.10358 271.9113 501.6192 272.65347Q501.13483 273.39566 500.21295 273.7941Q499.29108 274.19254 498.13483 274.19254Q496.21295 274.19254 495.20514 273.39566Q494.19733 272.5988 493.91608 271.0363ZM503.83795 277.77066L503.66608 276.20816Q504.21295 276.3488 504.6192 276.3488Q505.16608 276.3488 505.502 276.1613Q505.83795 275.9738 506.0567 275.64566Q506.21295 275.39566 506.5567 274.39566Q506.60358 274.25504 506.71295 273.9894L502.97858 264.1144L504.77545 264.1144L506.82233 269.83316Q507.22858 270.9113 507.54108 272.1144Q507.82233 270.95816 508.22858 269.8644L510.32233 264.1144L511.9942 264.1144L508.2442 274.14566Q507.65045 275.77066 507.3067 276.38004Q506.8692 277.20816 506.29108 277.59097Q505.71295 277.9738 504.91608 277.9738Q504.4317 277.9738 503.83795 277.77066ZM512.5723 271.0363L514.2286 270.77066Q514.3692 2
71.77066 515.002 272.2941Q515.6348 272.81754 516.77545 272.81754Q517.9317 272.81754 518.4864 272.3488Q519.0411 271.88004 519.0411 271.25504Q519.0411 270.69254 518.5567 270.3644Q518.21295 270.14566 516.8536 269.8019Q515.0098 269.33316 514.2989 268.99722Q513.58795 268.6613 513.22076 268.05972Q512.8536 267.45816 512.8536 266.7394Q512.8536 266.08316 513.15826 265.52066Q513.46295 264.95816 513.9786 264.58316Q514.3692 264.3019 515.0411 264.0988Q515.71295 263.89566 516.4786 263.89566Q517.65045 263.89566 518.52545 264.2316Q519.40045 264.56754 519.8145 265.13785Q520.2286 265.70816 520.3848 266.6613L518.7598 266.88004Q518.65045 266.13004 518.1114 265.70035Q517.5723 265.27066 516.6036 265.27066Q515.4473 265.27066 514.96295 265.65347Q514.4786 266.0363 514.4786 266.5363Q514.4786 266.8644 514.6817 267.13004Q514.8848 267.39566 515.3223 267.56754Q515.5723 267.6613 516.7911 268.00504Q518.5567 268.4738 519.2598 268.77066Q519.96295 269.06754 520.3614 269.64566Q520.7598 270.2238 520.7598 271.08
316Q520.7598 271.9113 520.27545 272.65347Q519.7911 273.39566 518.8692 273.7941Q517.9473 274.19254 516.7911 274.19254Q514.8692 274.19254 513.8614 273.39566Q512.8536 272.5988 512.5723 271.0363ZM529.0098 272.75504Q528.0723 273.5519 527.21295 273.87222Q526.3536 274.19254 525.3692 274.19254Q523.7598 274.19254 522.8848 273.40347Q522.0098 272.6144 522.0098 271.38004Q522.0098 270.64566 522.33795 270.0519Q522.6661 269.45816 523.1973 269.0988Q523.7286 268.7394 524.40045 268.5519Q524.90045 268.4113 525.8848 268.3019Q527.9161 268.0519 528.8692 267.7238Q528.8692 267.38004 528.8692 267.2863Q528.8692 266.27066 528.40045 265.8488Q527.7598 265.2863 526.4942 265.2863Q525.3223 265.2863 524.7598 265.69254Q524.1973 266.0988 523.9317 267.1613L522.2911 266.9269Q522.52545 265.88004 523.03326 265.2394Q523.5411 264.5988 524.502 264.24722Q525.46295 263.89566 526.7442 263.89566Q528.0098 263.89566 528.7911 264.19254Q529.5723 264.4894 529.9473 264.94254Q530.3223 265.39566 530.46295 266.08316Q530.5567 266
.50504 530.5567 267.6144L530.5567 269.8488Q530.5567 272.1769 530.65826 272.7941Q530.7598 273.4113 531.08795 273.9738L529.33795 273.9738Q529.0723 273.45816 529.0098 272.75504ZM528.8692 269.0363Q527.96295 269.39566 526.1348 269.6613Q525.1036 269.8019 524.6817 269.9894Q524.2598 270.1769 524.02545 270.5363Q523.7911 270.89566 523.7911 271.33316Q523.7911 272.00504 524.2989 272.45035Q524.8067 272.89566 525.77545 272.89566Q526.7442 272.89566 527.4942 272.46597Q528.2442 272.0363 528.6036 271.31754Q528.8692 270.7394 528.8692 269.64566L528.8692 269.0363ZM539.33795 273.9738L539.33795 272.7238Q538.40045 274.19254 536.58795 274.19254Q535.4161 274.19254 534.4239 273.5441Q533.4317 272.89566 532.89264 271.7316Q532.3536 270.56754 532.3536 269.0519Q532.3536 267.58316 532.84576 266.38004Q533.33795 265.1769 534.3145 264.5363Q535.2911 263.89566 536.5098 263.89566Q537.40045 263.89566 538.09576 264.27066Q538.7911 264.64566 539.2286 265.25504L539.2286 260.38004L540.8848 260.38004L540.8848 273.9738L5
39.33795 273.9738ZM534.0567 269.0519Q534.0567 270.94254 534.8614 271.88004Q535.6661 272.81754 536.7442 272.81754Q537.83795 272.81754 538.6036 271.9269Q539.3692 271.0363 539.3692 269.19254Q539.3692 267.1769 538.58795 266.2316Q537.8067 265.2863 536.6661 265.2863Q535.5567 265.2863 534.8067 266.19254Q534.0567 267.0988 534.0567 269.0519ZM543.3223 273.9738L543.3223 264.1144L544.8223 264.1144L544.8223 265.50504Q545.27545 264.7863 546.0489 264.34097Q546.8223 263.89566 547.8067 263.89566Q548.90045 263.89566 549.6036 264.3488Q550.3067 264.8019 550.58795 265.63004Q551.7598 263.89566 553.6348 263.89566Q555.1036 263.89566 555.89264 264.70816Q556.6817 265.52066 556.6817 267.20816L556.6817 273.9738L555.0098 273.9738L555.0098 267.77066Q555.0098 266.77066 554.8536 266.32535Q554.6973 265.88004 554.26764 265.6144Q553.83795 265.3488 553.2598 265.3488Q552.2286 265.3488 551.5411 266.0363Q550.8536 266.7238 550.8536 268.25504L550.8536 273.9738L549.1817 273.9738L549.1817 267.56754Q549.1817 266.45816
548.77545 265.90347Q548.3692 265.3488 547.4317 265.3488Q546.7286 265.3488 546.127 265.71597Q545.52545 266.08316 545.2598 266.8019Q544.9942 267.52066 544.9942 268.8644L544.9942 273.9738L543.3223 273.9738ZM557.33795 277.75504L557.33795 276.5363L568.40045 276.5363L568.40045 277.75504L557.33795 277.75504ZM572.90045 272.4738L573.1348 273.95816Q572.4317 274.0988 571.8692 274.0988Q570.96295 274.0988 570.46295 273.80972Q569.96295 273.52066 569.7598 273.05972Q569.5567 272.5988 569.5567 271.08316L569.5567 265.4269L568.3223 265.4269L568.3223 264.1144L569.5567 264.1144L569.5567 261.6769L571.21295 260.6769L571.21295 264.1144L572.90045 264.1144L572.90045 265.4269L571.21295 265.4269L571.21295 271.1769Q571.21295 271.89566 571.2989 272.0988Q571.3848 272.3019 571.58795 272.4269Q571.7911 272.5519 572.1661 272.5519Q572.4317 272.5519 572.90045 272.4738Z" fill-rule="nonzero" fill="#000000"></path><path d="M429.02548 267.4882L278.0097 267.4882" fill-rule="evenodd" stroke="#073763" stroke-width="2
.0" stroke-linejoin="round" stroke-linecap="butt"></path><path d="M278.0097 264.18472L268.9335 267.4882L278.0097 270.79166Z" fill-rule="evenodd" fill="#073763" stroke="#073763" stroke-width="2.0" stroke-linecap="butt"></path><path d="M427.7105 112.84252L274.68207 259.1942" fill-rule="evenodd" stroke="#073763" stroke-width="2.0" stroke-linejoin="round" stroke-linecap="butt"></path><path d="M272.39883 256.8068L268.1227 265.46735L276.9653 261.5816Z" fill-rule="evenodd" fill="#073763" stroke="#073763" stroke-width="2.0" stroke-linecap="butt"></path></svg>
+
diff --git a/html/selinux/modules/images/ldapdomain.png b/html/selinux/modules/images/ldapdomain.png
new file mode 100644
index 0000000..9aa8b49
Binary files /dev/null and b/html/selinux/modules/images/ldapdomain.png differ
diff --git a/html/selinux/modules/images/ldapdomain.svg b/html/selinux/modules/images/ldapdomain.svg
new file mode 100644
index 0000000..8ac6c94
--- /dev/null
+++ b/html/selinux/modules/images/ldapdomain.svg
@@ -0,0 +1,4 @@
+<?xml version="1.0" standalone="yes"?>
+
+<svg version="1.1" viewBox="0.0 0.0 763.0 357.0" fill="none" stroke="none" stroke-linecap="square" stroke-miterlimit="10" clip-path="url(#clip0)" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="clip0"><path d="M0 0L763.0 0L763.0 357.0L0 357.0L0 0Z" clip-rule="nonzero"></path></clipPath><path d="M79.15223 97.89764L273.54593 97.89764L273.54593 170.1181L79.15223 170.1181Z" fill-rule="nonzero" fill="#cfe2f3" stroke="#073763" stroke-width="2.0" stroke-linejoin="round" stroke-linecap="butt"></path><path d="M146.83974 137.56952L148.49599 137.3039Q148.63661 138.3039 149.26942 138.82733Q149.90224 139.35077 151.04286 139.35077Q152.19911 139.35077 152.7538 138.88202Q153.30849 138.41327 153.30849 137.78827Q153.30849 137.22577 152.82411 136.89764Q152.48036 136.6789 151.12099 136.33514Q149.27724 135.8664 148.5663 135.53046Q147.85536 135.19452 147.48817 134.59296Q147.12099 133.9914 147.12099 133.27264Q147.12099 132.6164 147.42567 132.0539Q147.730
36 131.4914 148.24599 131.1164Q148.63661 130.83514 149.30849 130.63202Q149.98036 130.4289 150.74599 130.4289Q151.91786 130.4289 152.79286 130.76483Q153.66786 131.10077 154.08192 131.67108Q154.49599 132.2414 154.65224 133.19452L153.02724 133.41327Q152.91786 132.66327 152.3788 132.23358Q151.83974 131.8039 150.87099 131.8039Q149.71474 131.8039 149.23036 132.1867Q148.74599 132.56952 148.74599 133.06952Q148.74599 133.39764 148.94911 133.66327Q149.15224 133.9289 149.58974 134.10077Q149.83974 134.19452 151.05849 134.53827Q152.82411 135.00702 153.52724 135.3039Q154.23036 135.60077 154.6288 136.1789Q155.02724 136.75702 155.02724 137.6164Q155.02724 138.44452 154.54286 139.1867Q154.05849 139.9289 153.13661 140.32733Q152.21474 140.72577 151.05849 140.72577Q149.13661 140.72577 148.1288 139.9289Q147.12099 139.13202 146.83974 137.56952ZM156.80849 140.50702L156.80849 126.91326L158.48036 126.91326L158.48036 140.50702L156.80849 140.50702ZM167.41786 139.28827Q166.48036 140.08514 165.62099 140.
40546Q164.76161 140.72577 163.77724 140.72577Q162.16786 140.72577 161.29286 139.9367Q160.41786 139.14764 160.41786 137.91327Q160.41786 137.1789 160.74599 136.58514Q161.07411 135.9914 161.60536 135.63202Q162.13661 135.27264 162.80849 135.08514Q163.30849 134.94452 164.29286 134.83514Q166.32411 134.58514 167.27724 134.25702Q167.27724 133.91327 167.27724 133.81952Q167.27724 132.8039 166.80849 132.38202Q166.16786 131.81952 164.90224 131.81952Q163.73036 131.81952 163.16786 132.22577Q162.60536 132.63202 162.33974 133.69452L160.69911 133.46014Q160.93349 132.41327 161.4413 131.77264Q161.94911 131.13202 162.91005 130.78046Q163.87099 130.4289 165.15224 130.4289Q166.41786 130.4289 167.19911 130.72577Q167.98036 131.02264 168.35536 131.47577Q168.73036 131.9289 168.87099 132.6164Q168.96474 133.03827 168.96474 134.14764L168.96474 136.38202Q168.96474 138.71014 169.0663 139.32733Q169.16786 139.94452 169.49599 140.50702L167.74599 140.50702Q167.48036 139.9914 167.41786 139.28827ZM167.27724 135.
56952Q166.37099 135.9289 164.54286 136.19452Q163.51161 136.33514 163.08974 136.52264Q162.66786 136.71014 162.43349 137.06952Q162.19911 137.4289 162.19911 137.8664Q162.19911 138.53827 162.70692 138.98358Q163.21474 139.4289 164.18349 139.4289Q165.15224 139.4289 165.90224 138.9992Q166.65224 138.56952 167.01161 137.85077Q167.27724 137.27264 167.27724 136.1789L167.27724 135.56952ZM171.35536 144.28827L171.35536 130.64764L172.88661 130.64764L172.88661 131.9289Q173.41786 131.1789 174.09755 130.8039Q174.77724 130.4289 175.73036 130.4289Q176.99599 130.4289 177.96474 131.07733Q178.93349 131.72577 179.42567 132.91327Q179.91786 134.10077 179.91786 135.50702Q179.91786 137.02264 179.37099 138.23358Q178.82411 139.44452 177.79286 140.08514Q176.76161 140.72577 175.62099 140.72577Q174.77724 140.72577 174.11317 140.3742Q173.44911 140.02264 173.02724 139.4914L173.02724 144.28827L171.35536 144.28827ZM172.87099 135.63202Q172.87099 137.53827 173.64442 138.44452Q174.41786 139.35077 175.51161 139.350
77Q176.62099 139.35077 177.41005 138.41327Q178.19911 137.47577 178.19911 135.4914Q178.19911 133.6164 177.42567 132.6789Q176.65224 131.7414 175.57411 131.7414Q174.51161 131.7414 173.6913 132.7414Q172.87099 133.7414 172.87099 135.63202ZM188.12099 140.50702L188.12099 139.25702Q187.18349 140.72577 185.37099 140.72577Q184.19911 140.72577 183.20692 140.07733Q182.21474 139.4289 181.67567 138.26483Q181.13661 137.10077 181.13661 135.58514Q181.13661 134.1164 181.6288 132.91327Q182.12099 131.71014 183.09755 131.06952Q184.07411 130.4289 185.29286 130.4289Q186.18349 130.4289 186.8788 130.8039Q187.57411 131.1789 188.01161 131.78827L188.01161 126.91326L189.66786 126.91326L189.66786 140.50702L188.12099 140.50702ZM182.83974 135.58514Q182.83974 137.47577 183.64442 138.41327Q184.44911 139.35077 185.52724 139.35077Q186.62099 139.35077 187.38661 138.46014Q188.15224 137.56952 188.15224 135.72577Q188.15224 133.71014 187.37099 132.76483Q186.58974 131.81952 185.44911 131.81952Q184.33974 131.81952 18
3.58974 132.72577Q182.83974 133.63202 182.83974 135.58514ZM190.57411 144.28827L190.57411 143.06952L201.63661 143.06952L201.63661 144.28827L190.57411 144.28827ZM206.13661 139.00702L206.37099 140.4914Q205.66786 140.63202 205.10536 140.63202Q204.19911 140.63202 203.69911 140.34296Q203.19911 140.0539 202.99599 139.59296Q202.79286 139.13202 202.79286 137.6164L202.79286 131.96014L201.55849 131.96014L201.55849 130.64764L202.79286 130.64764L202.79286 128.21014L204.44911 127.21014L204.44911 130.64764L206.13661 130.64764L206.13661 131.96014L204.44911 131.96014L204.44911 137.71014Q204.44911 138.4289 204.53505 138.63202Q204.62099 138.83514 204.82411 138.96014Q205.02724 139.08514 205.40224 139.08514Q205.66786 139.08514 206.13661 139.00702Z" fill-rule="nonzero" fill="#000000"></path><path d="M481.18896 97.89764L675.5827 97.89764L675.5827 170.1181L481.18896 170.1181Z" fill-rule="nonzero" fill="#ffe599" stroke="#073763" stroke-width="2.0" stroke-linejoin="round" stroke-linecap="butt"></path
><path d="M552.17334 128.81952L552.17334 126.91326L553.8452 126.91326L553.8452 128.81952L552.17334 128.81952ZM552.17334 140.50702L552.17334 130.64764L553.8452 130.64764L553.8452 140.50702L552.17334 140.50702ZM556.29834 140.50702L556.29834 130.64764L557.79834 130.64764L557.79834 132.0539Q558.8921 130.4289 560.93896 130.4289Q561.8296 130.4289 562.5796 130.7492Q563.3296 131.06952 563.6968 131.59296Q564.06396 132.1164 564.2202 132.81952Q564.31396 133.28827 564.31396 134.44452L564.31396 140.50702L562.6421 140.50702L562.6421 134.50702Q562.6421 133.4914 562.4468 132.98358Q562.25146 132.47577 561.75146 132.1789Q561.25146 131.88202 560.5796 131.88202Q559.5171 131.88202 558.74365 132.5539Q557.9702 133.22577 557.9702 135.13202L557.9702 140.50702L556.29834 140.50702ZM566.68896 128.81952L566.68896 126.91326L568.36084 126.91326L568.36084 128.81952L566.68896 128.81952ZM566.68896 140.50702L566.68896 130.64764L568.36084 130.64764L568.36084 140.50702L566.68896 140.50702ZM574.4702 139.00702L57
4.7046 140.4914Q574.00146 140.63202 573.43896 140.63202Q572.5327 140.63202 572.0327 140.34296Q571.5327 140.0539 571.3296 139.59296Q571.12646 139.13202 571.12646 137.6164L571.12646 131.96014L569.8921 131.96014L569.8921 130.64764L571.12646 130.64764L571.12646 128.21014L572.7827 127.21014L572.7827 130.64764L574.4702 130.64764L574.4702 131.96014L572.7827 131.96014L572.7827 137.71014Q572.7827 138.4289 572.86865 138.63202Q572.9546 138.83514 573.1577 138.96014Q573.36084 139.08514 573.73584 139.08514Q574.00146 139.08514 574.4702 139.00702ZM575.98584 140.50702L575.98584 130.64764L577.48584 130.64764L577.48584 132.14764Q578.06396 131.10077 578.54834 130.76483Q579.0327 130.4289 579.62646 130.4289Q580.4702 130.4289 581.3452 130.97577L580.7671 132.52264Q580.1577 132.16327 579.5327 132.16327Q578.98584 132.16327 578.55615 132.4914Q578.12646 132.81952 577.93896 133.39764Q577.6577 134.28827 577.6577 135.35077L577.6577 140.50702L575.98584 140.50702ZM588.6577 136.89764L590.29834 137.1164Q590.0
327 138.8039 588.92334 139.76483Q587.81396 140.72577 586.18896 140.72577Q584.17334 140.72577 582.9468 139.40546Q581.7202 138.08514 581.7202 135.6164Q581.7202 134.02264 582.24365 132.82733Q582.7671 131.63202 583.853 131.03046Q584.93896 130.4289 586.2046 130.4289Q587.81396 130.4289 588.8296 131.2414Q589.8452 132.0539 590.1421 133.5539L588.5171 133.8039Q588.2827 132.8039 587.68896 132.3039Q587.0952 131.8039 586.2671 131.8039Q585.00146 131.8039 584.2124 132.71014Q583.42334 133.6164 583.42334 135.56952Q583.42334 137.5539 584.18896 138.45233Q584.9546 139.35077 586.17334 139.35077Q587.1577 139.35077 587.81396 138.7492Q588.4702 138.14764 588.6577 136.89764ZM590.0171 144.28827L590.0171 143.06952L601.0796 143.06952L601.0796 144.28827L590.0171 144.28827ZM605.5796 139.00702L605.81396 140.4914Q605.11084 140.63202 604.54834 140.63202Q603.6421 140.63202 603.1421 140.34296Q602.6421 140.0539 602.43896 139.59296Q602.23584 139.13202 602.23584 137.6164L602.23584 131.96014L601.00146 131.96014L60
1.00146 130.64764L602.23584 130.64764L602.23584 128.21014L603.8921 127.21014L603.8921 130.64764L605.5796 130.64764L605.5796 131.96014L603.8921 131.96014L603.8921 137.71014Q603.8921 138.4289 603.978 138.63202Q604.06396 138.83514 604.2671 138.96014Q604.4702 139.08514 604.8452 139.08514Q605.11084 139.08514 605.5796 139.00702Z" fill-rule="nonzero" fill="#000000"></path><path d="M481.18896 195.82677L675.5827 195.82677L675.5827 268.04724L481.18896 268.04724Z" fill-rule="nonzero" fill="#ffe599" stroke="#073763" stroke-width="2.0" stroke-linejoin="round" stroke-linecap="butt"></path><path d="M539.0327 235.49864L540.68896 235.23302Q540.8296 236.23302 541.4624 236.75645Q542.0952 237.27989 543.23584 237.27989Q544.3921 237.27989 544.9468 236.81114Q545.50146 236.34239 545.50146 235.71739Q545.50146 235.15489 545.0171 234.82677Q544.67334 234.60802 543.31396 234.26427Q541.4702 233.79552 540.7593 233.45958Q540.04834 233.12364 539.68115 232.52208Q539.31396 231.92052 539.31396 231.20177Q539.31
396 230.54552 539.61865 229.98302Q539.92334 229.42052 540.43896 229.04552Q540.8296 228.76427 541.50146 228.56114Q542.17334 228.35802 542.93896 228.35802Q544.11084 228.35802 544.98584 228.69395Q545.86084 229.02989 546.2749 229.6002Q546.68896 230.17052 546.8452 231.12364L545.2202 231.34239Q545.11084 230.59239 544.5718 230.1627Q544.0327 229.73302 543.06396 229.73302Q541.9077 229.73302 541.42334 230.11583Q540.93896 230.49864 540.93896 230.99864Q540.93896 231.32677 541.1421 231.59239Q541.3452 231.85802 541.7827 232.02989Q542.0327 232.12364 543.25146 232.46739Q545.0171 232.93614 545.7202 233.23302Q546.42334 233.52989 546.8218 234.10802Q547.2202 234.68614 547.2202 235.54552Q547.2202 236.37364 546.73584 237.11583Q546.25146 237.85802 545.3296 238.25645Q544.4077 238.65489 543.25146 238.65489Q541.3296 238.65489 540.3218 237.85802Q539.31396 237.06114 539.0327 235.49864ZM548.9546 242.23302L548.7827 240.67052Q549.3296 240.81114 549.73584 240.81114Q550.2827 240.81114 550.61865 240.62364Q55
0.9546 240.43614 551.17334 240.10802Q551.3296 239.85802 551.67334 238.85802Q551.7202 238.71739 551.8296 238.45177L548.0952 228.57677L549.8921 228.57677L551.93896 234.29552Q552.3452 235.37364 552.6577 236.57677Q552.93896 235.42052 553.3452 234.32677L555.43896 228.57677L557.11084 228.57677L553.36084 238.60802Q552.7671 240.23302 552.42334 240.84239Q551.98584 241.67052 551.4077 242.05333Q550.8296 242.43614 550.0327 242.43614Q549.54834 242.43614 548.9546 242.23302ZM557.68896 235.49864L559.3452 235.23302Q559.48584 236.23302 560.11865 236.75645Q560.75146 237.27989 561.8921 237.27989Q563.04834 237.27989 563.603 236.81114Q564.1577 236.34239 564.1577 235.71739Q564.1577 235.15489 563.67334 234.82677Q563.3296 234.60802 561.9702 234.26427Q560.12646 233.79552 559.4155 233.45958Q558.7046 233.12364 558.3374 232.52208Q557.9702 231.92052 557.9702 231.20177Q557.9702 230.54552 558.2749 229.98302Q558.5796 229.42052 559.0952 229.04552Q559.48584 228.76427 560.1577 228.56114Q560.8296 228.35802 561.
5952 228.35802Q562.7671 228.35802 563.6421 228.69395Q564.5171 229.02989 564.93115 229.6002Q565.3452 230.17052 565.50146 231.12364L563.87646 231.34239Q563.7671 230.59239 563.228 230.1627Q562.68896 229.73302 561.7202 229.73302Q560.56396 229.73302 560.0796 230.11583Q559.5952 230.49864 559.5952 230.99864Q559.5952 231.32677 559.79834 231.59239Q560.00146 231.85802 560.43896 232.02989Q560.68896 232.12364 561.9077 232.46739Q563.67334 232.93614 564.37646 233.23302Q565.0796 233.52989 565.478 234.10802Q565.87646 234.68614 565.87646 235.54552Q565.87646 236.37364 565.3921 237.11583Q564.9077 237.85802 563.98584 238.25645Q563.06396 238.65489 561.9077 238.65489Q559.98584 238.65489 558.978 237.85802Q557.9702 237.06114 557.68896 235.49864ZM574.12646 237.21739Q573.18896 238.01427 572.3296 238.33458Q571.4702 238.65489 570.48584 238.65489Q568.87646 238.65489 568.00146 237.86583Q567.12646 237.07677 567.12646 235.84239Q567.12646 235.10802 567.4546 234.51427Q567.7827 233.92052 568.31396 233.56114Q5
68.8452 233.20177 569.5171 233.01427Q570.0171 232.87364 571.00146 232.76427Q573.0327 232.51427 573.98584 232.18614Q573.98584 231.84239 573.98584 231.74864Q573.98584 230.73302 573.5171 230.31114Q572.87646 229.74864 571.61084 229.74864Q570.43896 229.74864 569.87646 230.15489Q569.31396 230.56114 569.04834 231.62364L567.4077 231.38927Q567.6421 230.34239 568.1499 229.70177Q568.6577 229.06114 569.61865 228.70958Q570.5796 228.35802 571.86084 228.35802Q573.12646 228.35802 573.9077 228.65489Q574.68896 228.95177 575.06396 229.40489Q575.43896 229.85802 575.5796 230.54552Q575.67334 230.96739 575.67334 232.07677L575.67334 234.31114Q575.67334 236.63927 575.7749 237.25645Q575.87646 237.87364 576.2046 238.43614L574.4546 238.43614Q574.18896 237.92052 574.12646 237.21739ZM573.98584 233.49864Q573.0796 233.85802 571.25146 234.12364Q570.2202 234.26427 569.79834 234.45177Q569.37646 234.63927 569.1421 234.99864Q568.9077 235.35802 568.9077 235.79552Q568.9077 236.46739 569.4155 236.9127Q569.92334 23
7.35802 570.8921 237.35802Q571.86084 237.35802 572.61084 236.92833Q573.36084 236.49864 573.7202 235.77989Q573.98584 235.20177 573.98584 234.10802L573.98584 233.49864ZM584.4546 238.43614L584.4546 237.18614Q583.5171 238.65489 581.7046 238.65489Q580.5327 238.65489 579.5405 238.00645Q578.54834 237.35802 578.0093 236.19395Q577.4702 235.02989 577.4702 233.51427Q577.4702 232.04552 577.9624 230.84239Q578.4546 229.63927 579.43115 228.99864Q580.4077 228.35802 581.62646 228.35802Q582.5171 228.35802 583.2124 228.73302Q583.9077 229.10802 584.3452 229.71739L584.3452 224.84239L586.00146 224.84239L586.00146 238.43614L584.4546 238.43614ZM579.17334 233.51427Q579.17334 235.40489 579.978 236.34239Q580.7827 237.27989 581.86084 237.27989Q582.9546 237.27989 583.7202 236.38927Q584.48584 235.49864 584.48584 233.65489Q584.48584 231.63927 583.7046 230.69395Q582.92334 229.74864 581.7827 229.74864Q580.67334 229.74864 579.92334 230.65489Q579.17334 231.56114 579.17334 233.51427ZM588.43896 238.43614L588.43
896 228.57677L589.93896 228.57677L589.93896 229.96739Q590.3921 229.24864 591.1655 228.80333Q591.93896 228.35802 592.92334 228.35802Q594.0171 228.35802 594.7202 228.81114Q595.42334 229.26427 595.7046 230.09239Q596.87646 228.35802 598.75146 228.35802Q600.2202 228.35802 601.0093 229.17052Q601.79834 229.98302 601.79834 231.67052L601.79834 238.43614L600.12646 238.43614L600.12646 232.23302Q600.12646 231.23302 599.9702 230.7877Q599.81396 230.34239 599.3843 230.07677Q598.9546 229.81114 598.37646 229.81114Q597.3452 229.81114 596.6577 230.49864Q595.9702 231.18614 595.9702 232.71739L595.9702 238.43614L594.29834 238.43614L594.29834 232.02989Q594.29834 230.92052 593.8921 230.36583Q593.48584 229.81114 592.54834 229.81114Q591.8452 229.81114 591.24365 230.17833Q590.6421 230.54552 590.37646 231.26427Q590.11084 231.98302 590.11084 233.32677L590.11084 238.43614L588.43896 238.43614ZM602.4546 242.21739L602.4546 240.99864L613.5171 240.99864L613.5171 242.21739L602.4546 242.21739ZM618.0171 236.9361
4L618.25146 238.42052Q617.54834 238.56114 616.98584 238.56114Q616.0796 238.56114 615.5796 238.27208Q615.0796 237.98302 614.87646 237.52208Q614.67334 237.06114 614.67334 235.54552L614.67334 229.88927L613.43896 229.88927L613.43896 228.57677L614.67334 228.57677L614.67334 226.13927L616.3296 225.13927L616.3296 228.57677L618.0171 228.57677L618.0171 229.88927L616.3296 229.88927L616.3296 235.63927Q616.3296 236.35802 616.4155 236.56114Q616.50146 236.76427 616.7046 236.88927Q616.9077 237.01427 617.2827 237.01427Q617.54834 237.01427 618.0171 236.93614Z" fill-rule="nonzero" fill="#000000"></path><path d="M481.18896 134.00787L285.54593 134.00787" fill-rule="evenodd" stroke="#073763" stroke-width="2.0" stroke-linejoin="round" stroke-linecap="butt"></path><path d="M285.54593 130.7044L276.46973 134.00787L285.54593 137.31134Z" fill-rule="evenodd" fill="#073763" stroke="#073763" stroke-width="2.0" stroke-linecap="butt"></path><path d="M481.18896 231.93701L284.3994 139.12663" fill-rule="evenod
d" stroke="#073763" stroke-width="2.0" stroke-linejoin="round" stroke-linecap="butt"></path><path d="M285.80856 136.13878L276.1904 135.25507L282.9903 142.11447Z" fill-rule="evenodd" fill="#073763" stroke="#073763" stroke-width="2.0" stroke-linecap="butt"></path></svg>
+
diff --git a/html/selinux/modules/index.html b/html/selinux/modules/index.html
index 78285b8..90a967b 100644
--- a/html/selinux/modules/index.html
+++ b/html/selinux/modules/index.html
@@ -39,11 +39,14 @@ detail.
<p class="secthead"><a name="doc_chap1_sect3">Services (Daemons)</a></p>
<ul>
<li>
+<a href="bind.xml">BIND server</a> (bind)</li>
+ <li>
+<a href="ldap.xml">LDAP servers</a> (openldap)</li>
+ <li>
<a href="apache.xml">Web servers</a> (apache, lighttpd)</li>
</ul>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
@@ -61,7 +64,7 @@ detail.
</td>
<td width="1%" bgcolor="#dddaec" valign="top"><table border="0" cellspacing="4px" cellpadding="4px">
<tr><td class="topsep" align="center"><p class="altmenu"><a title="View a printer-friendly version" class="altlink" href="selinux/modules/index.xml?style=printable">Print</a></p></td></tr>
-<tr><td class="topsep" align="center"><p class="alttext">Updated June 2, 2011</p></td></tr>
+<tr><td class="topsep" align="center"><p class="alttext">Updated July 9, 2011</p></td></tr>
<tr><td class="topsep" align="left"><p class="alttext"><b>Summary: </b>
SELinux aggregates its permissions in modules to make the entire policy more
manageable. To help users work with these modules, we document the common
diff --git a/html/selinux/modules/index.html b/html/selinux/modules/ldap.html
similarity index 58%
copy from html/selinux/modules/index.html
copy to html/selinux/modules/ldap.html
index 78285b8..64dda6e 100644
--- a/html/selinux/modules/index.html
+++ b/html/selinux/modules/ldap.html
@@ -11,39 +11,84 @@
<link rel="search" type="application/opensearchdescription+xml" href="http://www.gentoo.org/search/archives-gentoo-org.xml" title="Gentoo List Archives">
<title>Gentoo Linux Documentation
--
- SELinux Modules</title>
+ SELinux LDAP Module</title>
</head>
<body style="margin:0px;" bgcolor="#ffffff"><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr><td valign="top" height="125" bgcolor="#45347b"><a href="http://www.gentoo.org/"><img border="0" src="http://www.gentoo.org/../../images/gtop-www.jpg" alt="Gentoo Logo"></a></td></tr>
<tr><td valign="top" align="right" colspan="1" bgcolor="#ffffff"><table border="0" cellspacing="0" cellpadding="0" width="100%"><tr>
<td width="99%" class="content" valign="top" align="left">
-<br><h1>SELinux Modules</h1>
+<br><h1>SELinux LDAP Module</h1>
<p class="chaphead"><a name="doc_chap1"></a><span class="chapnum">1.
- </span>Modules</p>
-<p>
-If you use Gentoo Hardened with SELinux, then you'll eventually need to
-configure your system to work with the policies (or update the policies to work
-with your system). To help you tune the policy, insight in how the modules are
-structured and what they contain is necessary.
+ </span>Structure</p>
+<p class="secthead"><a name="doc_chap1_sect1">Domains</a></p>
+<br><a name="doc_chap1_fig1"></a><table cellspacing="0" cellpadding="0" border="0">
+<tr><td bgcolor="#7a5ada"><p class="codetitle">Figure1.1: General LDAP domain overview</p></td></tr>
+<tr><td align="center" bgcolor="#ddddff"><img src="./images/ldapdomain.png" alt="Fig. 1: General LDAP domain overview"></td></tr>
+</table>
+<br><p>
+The <span class="code" dir="ltr">slapd</span> daemon runs within the <span class="code" dir="ltr">slapd_t</span> domain and can only be
+transitioned towards through the <span class="code" dir="ltr">sysadm_t</span> (general system administrative
+domain) or <span class="code" dir="ltr">initrc_t</span> (init script launched) domains.
</p>
+<p class="secthead"><a name="doc_chap1_sect2">File Types/Labels</a></p>
<p>
-Gentoo Hardened tries to document the common modules as well as how they are
-structured. Also, we document what configuration changes are often requested and
-how to deal with them. If a module contains booleans, we explain them in more
-detail.
+The following table lists the file type/labels defined in the <span class="code" dir="ltr">ldap</span>
+module.
</p>
-<p class="secthead"><a name="doc_chap1_sect2">Administrative Modules</a></p>
-<ul>
- <li><a href="portage.xml">Portage</a></li>
-</ul>
-<p class="secthead"><a name="doc_chap1_sect3">Services (Daemons)</a></p>
-<ul>
- <li>
-<a href="apache.xml">Web servers</a> (apache, lighttpd)</li>
-</ul>
+<table class="ntable">
+<tr>
+ <td class="infohead"><b>Type</b></td>
+ <td class="infohead"><b>Function</b></td>
+ <td class="infohead"><b>Description</b></td>
+</tr>
+<tr>
+ <td class="tableinfo">slapd_exec_t</td>
+ <td class="tableinfo">Entrypoint</td>
+ <td class="tableinfo">Executable entry point for the slapd daemon binaries</td>
+</tr>
+<tr>
+ <td class="tableinfo">slapd_etc_t</td>
+ <td class="tableinfo">Configuration</td>
+ <td class="tableinfo">Label for OpenLDAP configuration files</td>
+</tr>
+<tr>
+ <td class="tableinfo">slapd_cert_t</td>
+ <td class="tableinfo">Configuration</td>
+ <td class="tableinfo">Label for certificate keystores used by OpenLDAP</td>
+</tr>
+<tr>
+ <td class="tableinfo">slapd_db_t</td>
+ <td class="tableinfo">Configuration</td>
+ <td class="tableinfo">Label for the OpenLDAP database files (backend content)</td>
+</tr>
+<tr>
+ <td class="tableinfo">slapd_replog_t</td>
+ <td class="tableinfo">Configuration</td>
+ <td class="tableinfo">Label for the slurpd replication log location</td>
+</tr>
+<tr>
+ <td class="tableinfo">slapd_lock_t</td>
+ <td class="tableinfo"></td>
+ <td class="tableinfo">Label for the lock files (runtime)</td>
+</tr>
+<tr>
+ <td class="tableinfo">slapd_tmp_t</td>
+ <td class="tableinfo"></td>
+ <td class="tableinfo">Label for the temporary files</td>
+</tr>
+<tr>
+ <td class="tableinfo">slapd_var_run_t</td>
+ <td class="tableinfo"></td>
+ <td class="tableinfo">Label for the runtime variable data</td>
+</tr>
+<tr>
+ <td class="tableinfo">slapd_initrc_exec_t</td>
+ <td class="tableinfo"></td>
+ <td class="tableinfo">Label for non-Gentoo init script</td>
+</tr>
+</table>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
@@ -60,12 +105,11 @@ detail.
--><br>
</td>
<td width="1%" bgcolor="#dddaec" valign="top"><table border="0" cellspacing="4px" cellpadding="4px">
-<tr><td class="topsep" align="center"><p class="altmenu"><a title="View a printer-friendly version" class="altlink" href="selinux/modules/index.xml?style=printable">Print</a></p></td></tr>
-<tr><td class="topsep" align="center"><p class="alttext">Updated June 2, 2011</p></td></tr>
+<tr><td class="topsep" align="center"><p class="altmenu"><a title="View a printer-friendly version" class="altlink" href="selinux/modules/apache.xml?style=printable">Print</a></p></td></tr>
+<tr><td class="topsep" align="center"><p class="alttext">Updated July 9, 2011</p></td></tr>
<tr><td class="topsep" align="left"><p class="alttext"><b>Summary: </b>
-SELinux aggregates its permissions in modules to make the entire policy more
-manageable. To help users work with these modules, we document the common
-modules and how to work with them.
+Within SELinux, the ldap module is responsible for defining the openldap
+domains and interactions.
</p></td></tr>
<tr><td align="left" class="topsep"><p class="alttext">
<a href="mailto:sven.vermeulen@siphos.be" class="altlink"><b>Sven Vermeulen</b></a>
diff --git a/html/selinux/modules/portage.html b/html/selinux/modules/portage.html
index c06661a..1d062aa 100644
--- a/html/selinux/modules/portage.html
+++ b/html/selinux/modules/portage.html
@@ -243,14 +243,32 @@ Don't forget that Portage uses subdirectories with different labels (think
distfiles or the repositories for the live ebuilds) so take care when
relabelling locations!
</p>
+<p>
+If you are using different mounts, you might need to use the
+<span class="code" dir="ltr">rootcontext=</span> mount option to set the initial context. If the file system
+does not suppor SELinux contexts (like NFS), you can use the <span class="code" dir="ltr">context=</span>
+mount option to force the context of all files on the mounted location.
+</p>
<p class="secthead"><a name="doc_chap2_sect2">Booleans</a></p>
<p>
-The Portage module within Gentoo defines one boolean, called
-<span class="code" dir="ltr">gentoo_try_dontaudit</span>. When enabled, the policy will hide the AVC denials
-of which the Gentoo developers believe they are harmless (cosmetic). If this
-boolean is enabled and you are experiencing permission problems, it is wise to
-first disable the boolean and see if you now get any denials that could explain
-the problem.
+The Portage module within Gentoo defines two booleans, called
+<span class="code" dir="ltr">gentoo_try_dontaudit</span> and <span class="code" dir="ltr">gentoo_portage_allow_nfs</span>.
+</p>
+<p>
+When <span class="code" dir="ltr">gentoo_try_dontaudit</span> is enabled, the policy will hide the AVC
+denials of which the Gentoo developers believe they are harmless (cosmetic).
+If this boolean is enabled and you are experiencing permission problems, it
+is wise to first disable the boolean and see if you now get any denials that
+could explain the problem.
+</p>
+<p>
+When <span class="code" dir="ltr">gentoo_portage_allow_nfs</span> is enabled, then the Portage-related
+domains will be able to manage the <span class="code" dir="ltr">nfs_t</span> and as such, allow for the
+Portage tree and other locations to be NFS-mounted without correcting their
+label (which is still supported when using the <span class="code" dir="ltr">context=</span> mount option).
+</p>
+<p>
+To switch booleans, use <span class="code" dir="ltr">setsebool</span> or <span class="code" dir="ltr">togglesebool</span>.
</p>
<a name="doc_chap2_pre2"></a><table class="ntable" width="100%" cellspacing="0" cellpadding="0" border="0">
<tr><td bgcolor="#7a5ada"><p class="codetitle">Code Listing2.2: Enabling the gentoo_try_dontaudit boolean</p></td></tr>
@@ -260,8 +278,7 @@ the problem.
</pre></td></tr>
</table>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
@@ -279,7 +296,7 @@ the problem.
</td>
<td width="1%" bgcolor="#dddaec" valign="top"><table border="0" cellspacing="4px" cellpadding="4px">
<tr><td class="topsep" align="center"><p class="altmenu"><a title="View a printer-friendly version" class="altlink" href="selinux/modules/portage.xml?style=printable">Print</a></p></td></tr>
-<tr><td class="topsep" align="center"><p class="alttext">Updated June 2, 2011</p></td></tr>
+<tr><td class="topsep" align="center"><p class="alttext">Updated July 7, 2011</p></td></tr>
<tr><td class="topsep" align="left"><p class="alttext"><b>Summary: </b>
Within SELinux, the portage module is responsible for defining the
Gentoo-related domains and privileges, including those for the Portage package
diff --git a/html/selinux/selinux-handbook.html b/html/selinux/selinux-handbook.html
index 84ce4ab..7006609 100644
--- a/html/selinux/selinux-handbook.html
+++ b/html/selinux/selinux-handbook.html
@@ -141,8 +141,7 @@ compiled in this chapter.
</p>
<hr>
<p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
diff --git a/html/toolchain-upgrade-guide.html b/html/toolchain-upgrade-guide.html
index 4229402..872ea00 100644
--- a/html/toolchain-upgrade-guide.html
+++ b/html/toolchain-upgrade-guide.html
@@ -237,8 +237,7 @@ Technical Description of the Gentoo Hardened Toolchain</a></li>
<li><a href="http://www.gentoo.org/doc/en/gcc-upgrading.xml">Standard Gentoo GCC Upgrade Guide</a></li>
</ul>
<br><p class="copyright">
- The contents of this document are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">Creative Commons -
- Attribution / Share Alike</a> license.
+ The contents of this document, unless otherwise expressly stated, are licensed under the <a href="http://creativecommons.org/licenses/by-sa/2.5">CC-BY-SA-2.5</a> license. The <a href="http://www.gentoo.org/main/en/name-logo.xml"> Gentoo Name and Logo Usage Guidelines </a> apply.
</p>
<!--
<rdf:RDF xmlns="http://web.resource.org/cc/"
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2011-07-09 17:10 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-07-09 17:10 [gentoo-commits] proj/hardened-docs:master commit in: html/, html/selinux/modules/, html/rsbac/, html/docs/, Sven Vermeulen
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox