[gentoo-commits] proj/hardened-docs:master commit in: xml/selinux/

["Sven Vermeulen" <sven.vermeulen@siphos.be>]

commit:     e192a4decc6aaf25d42789816fa2d716f1d328c0
Author:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Sun Sep 18 13:48:08 2011 +0000
Commit:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
CommitDate: Sun Sep 18 13:48:08 2011 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-docs.git;a=commit;h=e192a4de

Start larger update effort on SELinux documentation

---
 xml/selinux/selinux-handbook.xml |  104 ++++++++++++++++++++++----------------
 1 files changed, 60 insertions(+), 44 deletions(-)

diff --git a/xml/selinux/selinux-handbook.xml b/xml/selinux/selinux-handbook.xml
index 53e4cf1..893e120 100644
--- a/xml/selinux/selinux-handbook.xml
+++ b/xml/selinux/selinux-handbook.xml
@@ -24,8 +24,8 @@ This is the Gentoo SELinux Handbook.
 <!-- See http://creativecommons.org/licenses/by-sa/1.0 -->
 <license/>
 
-<version>3.00</version>
-<date>2010-12-01</date>
+<version>4</version>
+<date>2011-09-18</date>
 
 <part>
 <title>Introduction to Gentoo/Hardened SELinux</title>
@@ -57,6 +57,17 @@ how SELinux policies work and how to troubleshoot if things go wrong.
 </chapter>
 
 <chapter>
+<title>SELinux Resources</title>
+<abstract>
+To get more acquainted with SELinux, many resources exist on the Internet.
+In this chapter we give a quick overview of the various resources as well
+as places where you can get more help when you are fighting with SELinux.
+</abstract>
+  <include href="hb-intro-resources.xml"/>
+</chapter>
+
+<!-- 
+<chapter>
 <title>The SELinux (Reference) Policy</title>
 <abstract>
 To streamline SELinux policy development, a reference policy is being developed
@@ -68,10 +79,6 @@ cover the basics on SELinux policies in general.
   <include href="hb-intro-referencepolicy.xml"/>
 </chapter>
 
-<!--
-  Removed for the time being, not critical.
-  Moved to next major version of handbook.
-
 <chapter>
 <title>SELinux Virtual Machine Support</title>
 <abstract>
@@ -105,79 +112,88 @@ you through this process.
 </chapter>
 
 <chapter>
+<title>Configuring SELinux For Your Needs</title>
+<abstract>
+With SELinux now "installed" and enabled (although in permissive mode), we now
+configure it to suit your particular needs. After all, SELinux is a Mandatory
+Access Control system where you, as security administrator, define what is
+allowed and what not.
+</abstract>
+  <include href="hb-using-configuring.xml"/>
+</chapter>
+
+<chapter>
 <title>SELinux Commands</title>
 <abstract>
-Before we start with SELinux, we first take a step back and get to know a few
-commands. As we are currently running a SELinux enabled system (but in
-permissive mode) we can now get acquainted with the various SELinux-specific
-commands.
+Let's take a step back and get to know a few more commands. We covered most of
+them in the previous section, but we will now dive a bit deeper in its
+syntax, features and potential pitfalls.
 </abstract>
   <include href="hb-using-commands.xml"/>
 </chapter>
 
 <chapter>
-<title>Running in Permissive Mode</title>
+<title>Permissive, Unconfined, Disabled or What Not...</title>
 <abstract>
-Once SELinux is active, we first start by running the system in permissive mode.
-In this chapter, we tell you how to get acquainted with SELinux more in-depth
-with live command information, but without interfering with the standard access
-controls (i.e. in permissive mode).
+Your system can be in many SELinux states. In this chapter, we help you switch
+between the various states / policies.
 </abstract>
-  <include href="hb-using-permissive.xml"/>
+  <include href="hb-using-states.xml"/>
 </chapter>
 
 <chapter>
-<title>Switching to Enforcing Mode</title>
+<title>Modifying the Gentoo Hardened SELinux Policy</title>
 <abstract>
-Once you believe that the system can be ran in enforcing mode, we switch the
-system to verify if this is true. Once verified, the next step is to (re)boot in
-enforcing mode. Finally, if we are confident that the enforcing is working
-properly and that the system is still doing its job correctly, we fix the
-enforcing mode so that it cannot be disabled anymore.
+Gentoo Hardened offers a default policy, but this might not allow what you want
+(or allows too much). In this chapter we tell you how you can tweak Gentoo's
+policy, or even run your own.
 </abstract>
-  <include href="hb-using-enforcing.xml"/>
+  <include href="hb-using-policies.xml"/>
 </chapter>
 
 <chapter>
-<title>Adding SELinux Policy Modules</title>
+<title>Troubleshooting SELinux</title>
 <abstract>
-Far from all packages where SELinux policy modules are available for have a
-corresponding package in Gentoo/Hardened. In this chapter, we help you to add
-more modules yourself or create your own modules for those packages that have no
-SELinux policies yet.
+Everything made by a human can and will fail. In this chapter we will try to
+keep track of all potential issues you might come across and how to resolve
+them. 
 </abstract>
-  <include href="hb-using-policymodules.xml"/>
+  <include href="hb-using-troubleshoot.xml"/>
 </chapter>
 </part>
 
+<!--
 <part>
-<title>Appendices</title>
+<title>Advanced SELinux</title>
 <abstract>
-Additional resources and referenced materials within this book are mentioned in
-this appendix.
+SELinux can be much more integrated in the system. In this part, we describe how
+to enhance SELinux configurations, tuning and securing your system even more.
 </abstract>
 
 <chapter>
-<title>Troubleshooting SELinux</title>
+<title>Working with MLS</title>
 <abstract>
-Everything made by a human can and will fail. In this chapter we will try to
-keep track of all potential issues you might come across and how to resolve
-them. 
+...
 </abstract>
-  <include href="hb-appendix-troubleshoot.xml"/>
+  <include href="hb-advanced-mls.xml"/>
 </chapter>
 
 <chapter>
-<title>SELinux Reference Material</title>
+<title>Using s(ecure) Virt(ualization)</title>
 <abstract>
-This Gentoo Hardened SELinux handbook gives a first introduction to SELinux and
-how it is integrated in Gentoo Hardened. But more seasoned administrators will
-most definitely want to read up on the more advanced uses (and managerial
-challenges) of SELinux - which we definitely recommend. A non-exhaustive list is
-compiled in this chapter.
+...
 </abstract>
-  <include href="hb-appendix-reference.xml" />
+  <include href="hb-advanced-svirt.xml"/>
+</chapter>
+
+<chapter>
+<title>Using Netlabel</title>
+<abstract>
+...
+</abstract>
+  <include href="hb-advanced-netlabel.xml"/>
 </chapter>
 </part>
+-->
 
 </book>