[SOLVED] What is the use of selinux in linux

sriramraj · 11-22-2010, 03:24 AM

I heard selinux is secured linux.

But what are the real advantages of using selinux. When we install selinux, it is in enforcing state. But it starts dropping packets.

And until, we disable it in /etc/selinux/config, and restart machine, nothing works in the machine.

I am using fedora 9
Any one can tell what exactly is selinux used for???

ganesh24pal@gmail.com · 11-22-2010, 05:17 AM

hi,

can you elobrate your issue.

neonsignal · 11-22-2010, 05:26 AM

SELinux provides a way to have access controls in Linux, which means you can have centralized security policies, and much finer grained control than with traditional Unix style security.

It comes with some default policies, which may need to be changed to suit your context.

John VV · 11-22-2010, 01:05 PM

and in the very very old and DEAD fedora 9 the SE tools were VERY VERY VERY bad ,some of the SE polices were also bad
They are way better in the current AND SUPPORTED Fedora 14

fedora 9 has had NO SECURITY ( nor any at all ) in years . It is so old , in fact , that the repos were moved a few years back to THE HISTORICAL ARCHIVES .

Please INSTALL Fedora 14 FIRST

I have not had any issues with SE ( EXCEPT IN THE OLD AND DEAD fedora9 , 9 was buggy )
here is a FAQ BUT for fedora 13
http://docs.fedoraproject.org/en-US/...FAQ/index.html
and the main NSA page
http://www.nsa.gov/research/selinux/index.shtml

lupusarcanus · 11-24-2010, 01:57 AM

Quote:

Originally Posted by John VV

and in the very very old and DEAD fedora 9 the SE tools were VERY VERY VERY bad ,some of the SE polices were also bad
They are way better in the current AND SUPPORTED Fedora 14

fedora 9 has had NO SECURITY ( nor any at all ) in years . It is so old , in fact , that the repos were moved a few years back to THE HISTORICAL ARCHIVES .

Please INSTALL Fedora 14 FIRST

I have not had any issues with SE ( EXCEPT IN THE OLD AND DEAD fedora9 , 9 was buggy )
here is a FAQ BUT for fedora 13
http://docs.fedoraproject.org/en-US/...FAQ/index.html
and the main NSA page
http://www.nsa.gov/research/selinux/index.shtml

This made me laugh. But he is right.

sriramraj · 11-25-2010, 01:18 AM

Thanks john for the link. I have understood now exactly why selinux is useful.

But i have many of my applications developed on fedora 9 and to port those applications to fedora 14 is difficult.

So i need something done to this selinux only. Thanks anyway for the resolution provided