Securing virtualization with SElinux.

hack3rcon · 06-13-2016, 09:00 AM

Hello.
Can anyone show me some SElinux options for securing Virtualization like Xen? I like to secure my Xen via SElinux.

Thank you.

unSpawn · 06-13-2016, 06:18 PM

Under your other account you registered in 2008. In 2014 I asked you to please read https://www.linuxquestions.org/quest...#faq_lqwelcome and recommended you start any new thread by including pertinent technical information like a concise description of the problem et cetera which includes posting what you have researched and tried yourself. Please make some effort before posting. That is efficient because it provides our fellow LQ members with information to work with.

hack3rcon · 06-14-2016, 01:09 AM

Quote:

Originally Posted by unSpawn

Under your other account you registered in 2008. In 2014 I asked you to please read https://www.linuxquestions.org/quest...#faq_lqwelcome and recommended you start any new thread by including pertinent technical information like a concise description of the problem et cetera which includes posting what you have researched and tried yourself. Please make some effort before posting. That is efficient because it provides our fellow LQ members with information to work with.

I did and found some links but most of them are Old.

JJJCR · 06-14-2016, 01:48 AM

Old info doesn't mean useless, old stuff most of the time are very good info because it gives you a detail how a complex thing has started.

But of course if you just want to get things done and don't care how and why it works, then I guess it's a different story.

Anyway here's some link below:

Securing Xen:
http://wiki.xenproject.org/wiki/Securing_Xen

Intro to SELinux:
https://www.digitalocean.com/communi...basic-concepts

Good luck!

hack3rcon · 06-19-2016, 06:20 AM

Quote:

Originally Posted by JJJCR

Old info doesn't mean useless, old stuff most of the time are very good info because it gives you a detail how a complex thing has started.

But of course if you just want to get things done and don't care how and why it works, then I guess it's a different story.

Anyway here's some link below:

Securing Xen:
http://wiki.xenproject.org/wiki/Securing_Xen

Intro to SELinux:
https://www.digitalocean.com/communi...basic-concepts

Good luck!

I looked at "https://www.centos.org/docs/5/html/5.2/Virtualization/chap-Virtualization-SELinux_and_virtualization.html" but commands not working

unSpawn · 06-19-2016, 06:41 AM

Quote:

Originally Posted by hack3rcon

(..) commands not working

I'm sorry to hear that but you're supposed to help us help you. That should have been done by posting pertinent nfo.

hack3rcon · 06-19-2016, 07:51 AM

Command worked when I changed it to "semanage fcontext -a -t xen_image_t -f b /dev/XXX".

sundialsvcs · 06-20-2016, 10:50 AM

I started to dive into SELinux, but then realized that AppArmor, which comes with Ubuntu these days, was able to do everything that I needed to do.

As far as I can see, SELinux focuses on the user, while AppArmor focuses on the application. In many other ways they do similar things.