Index

explained, 30

how to change, 66

settings, 30

Symbols

boot

policy role in, 7

$SELINUX_POLICY/

building

what is, iii

(See compiling)

$SELINUX_SRC/

building policy

what is, iii

how to, 91

what is, 93

A

C

access vector rule

syntax, 19

CGI scripts

access vectors, 19

how to run from a mounted directory, 68

activating your subscription, vii

changing a Boolean

analysis

how to, 66

(See tools)

changing the policy

(See policy analysis)

how to, 67

dumping or viewing the logs, 71

checking status

dumping or viewing the policy, 71

how to, 62

logs, 55

checkpolicy

analyzing

how to use, 93

kernel audit message, 70

command line tools

macros, 22

avcstat, 71, 73

apol

checkpolicy, 93

how to use, 83

enabling or disabling enforcement, 65

architecture

newrole, 69

SELinux, 1

runcon, 68

archiving files and directories, 60

seinfo, 73

assuming a new role or type

sesearch, 73

how to, 69

sestatus, 62

attribute declaration

setting Booleans, 66

syntax, 12

useful for shell scripts, 69

attributes, 12

commands with SELinux options

auditing

cp, 55

how to enable kernel auditing, 70

id, 56

AV

ls, 56

(See access vectors)

mount, 68

AVC statistics

mv, 55

how to view, 71

ps, 56

avc: denied

compiling

explained, 20

SELinux, 91

troubleshooting, 67

compiling policy

how to, 91

B

constraints, 26

controlling SELinux, 55

background

administrators, 62

SELinux, 107

analysts, 70

backing up files

end users, 55

(See archiving files and directories)

conventions

backtracking a rule

document, iii

how to, 22

cp command

Booleans

using with SELinux, 55

command line tools, 66

customizing policy