From: Sven Vermeulen <sven.vermeulen@siphos.be>
To: gentoo-hardened@lists.gentoo.org
Subject: [gentoo-hardened] SELinux documentation draft
Date: Thu, 6 Jan 2011 23:32:08 +0100 [thread overview]
Message-ID: <20110106223208.GA29456@siphos.be> (raw)
[-- Attachment #1: Type: text/plain, Size: 1981 bytes --]
Hi everyone,
I've been working on bringing the SELinux handbook as currently available on
http://www.gentoo.org/proj/en/hardened/selinux/selinux-handbook.xml more
up2date. It's somewhat of a rewrite, but with all elements of the original
SELinux handbook still inside it (apart from the troubleshooting as I guess
those are quite outdated, being from 2006 and older).
The draft is currently available in the hardened-docs.git repository. In
http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-docs.git;a=tree;f=html/selinux;hb=HEAD
you should be able to select individual chapters (HTML format) in the "raw"
tree to view them somewhat like they would on the Gentoo site, but for your
convenience there's also a PDF available at
http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-docs.git;a=tree;f=pdf;hb=HEAD
The new draft is structed in three parts:
Part A - Introduction to Gentoo/Hardened SELinux
Chapter 1. Enhancing Linux Security
Chapter 2. SELinux Concepts
Chapter 3. The SELinux (Reference) Policy
Part B - Using Gentoo/Hardened SELinux
Chapter 1. Gentoo SELinux Installation / Conversion
Chapter 2. SELinux Commands
Chapter 3. Running in Permissive Mode
Chapter 4. Switching to Enforcing Mode
Chapter 5. Adding SELinux Policy Modules
Part C - Appendices
Chapter 1. Troubleshooting SELinux
Chapter 2. SELinux Reference Material
If time permits, part A will have a fourth chapter on virtualization and
SELinux, but I gather that's more for the next update on the documentation.
The document is currently written with the ebuilds in hardened-development
overlay in mind, so everyone interested in giving Gentoo Hardened with
SELinux a try can use the draft documentation with the
"hardened-development" overlay.
For the time being the document only supports the type enforcement features
of SELinux. MLS/MCS has not been touched yet.
Feedback is always welcome, including language mistakes, typos or just plain
lies.
Wkr,
Sven Vermeulen
[-- Attachment #2: Type: application/pgp-signature, Size: 198 bytes --]
next reply other threads:[~2011-01-06 23:03 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2011-01-06 22:32 Sven Vermeulen [this message]
2011-01-07 0:43 ` [gentoo-hardened] SELinux documentation draft klondike
2011-01-07 2:02 ` Chris Richards
2011-01-07 2:48 ` Asaf Gery
2011-01-10 13:44 ` Chris PeBenito
2011-01-10 21:23 ` Sven Vermeulen
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20110106223208.GA29456@siphos.be \
--to=sven.vermeulen@siphos.be \
--cc=gentoo-hardened@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox