113

role declaration, 25

W

type declaration, 17

Web content

type transition, 18

how to serve from a mounted directory, 68

system administrators

what are

controlling and maintaining SELinux, 62

access vectors, 19

administrator tasks, 62

T

attributes, 12

directories for SELinux, iii

targeted policy

end user tasks, 55

common macros, 39

file labels, 8

defined, 29

files and directories used by SELinux, 30

roles and users, 43

macros, 21

TE rule analysis, 85

object classes, 10

tools

roles, 24

for users, 55

security contexts, 8

SELinux, 73

security labels, 8

transition analysis

types, 17

(See domain transition analysis)

users, 24

transitive information flow

what happens

(See information flow)

during policy build, 93

troubleshooting SELinux

what is

how to, 67

$SELINUX_POLICY/, iii

tunables

$SELINUX_SRC/, iii

AVC cache threshold, 89

avc: denied, 20

type declarations, 17

labeling, 8

syntax, 17

mountpoint labeling, 9

Type Enforcement

policy, 5

access vectors, 19

policy build, 93

type transition

policy role in boot, 7

syntax, 18

SELinux, i

types

selinuxfs file system, 27

targeted policy, 29

assuming a new type, 69

the architecture of SELinux, 1

attributes, 12

what you should know, ii

when to

U

compile, 91

reboot, 70

URLs

where are

(See references)

files and directories for SELinux, 6

users, 24, 55

writing policy

(See Also end users)

how to, 95

$SELINUX_SRC/users file explained, 44

using seaudit, 76

arranging views, 77

X

basic filters, 77

xattr

holding security context labels, 8

V

validating a policy

how to, 94

viewing

AVC statistics, 71

logs, 71

policy, 71