110

how to, 95

F

file content description

D

syntax, 38

file contexts files

DAC

example, 38

definition, 107

files

definition of

policy files and directories, 30

DAC, 107

where are SELinux files, 6

MAC, 107

Flask, 107

object classes, 10

documentation references

permissions, 10

(See references)

targeted policy, 29

Flask security architecture

direct information flow

and SELinux, 1, 3

(See information flow)

further reading

directories

(See references)

policy files and directories, 30

directories for SELinux

what are, iii

G

where are, 6

directory access

genfs labeling, 8

how to, 64

granting access to a directory

directory presentation, iii

how to, 64

disable

GUI tools

enforcement, 65

apol, 83

SELinux, 65

seaudit, 76

SELinux protection of a daemon, 65

discretionary access control

(See DAC)

H

documentation references

(See references)

history

domain transition analysis, 88

SELinux, 107

domains

how to

attributes, 12

administrator tasks, 62

dhcpd, 48

analyze a macro, 22

domain transition analysis, 88

archive files and directories, 60

dumping logs

assume a new role or type, 69

how to, 71

backtrack a rule, 22

dumping policy

backup files, 60

how to, 71

change a Boolean setting, 66

change the policy, 67

compile policy, 91

E

dump or view logs, 71

enable

dump or view policy, 71

enforcement, 65

enable kernel auditing, 70

kernel auditing, 70

enable or disable enforcement, 65

SELinux, 65

enable or disable SELinux protection of a daemon,

SELinux protection of a daemon, 65

65

end users

end user tasks, 55

controlling and maintaining SELinux, 55

grant access to a directory, 64

troubleshooting user problems, 67

install a policy package, 64

example

know when to compile, 91

file contexts files, 38

know when to reboot, 70

network declaration, 34

load a binary policy, 64

role allow, 25

manage NFS home directories, 63

role declaration, 25

performance tune, 89