LinuxQuestions.org
Visit the LQ Articles and Editorials section
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices



Reply
 
Search this Thread
Old 10-18-2010, 09:50 PM   #1
clubbing80s
LQ Newbie
 
Registered: Jun 2010
Distribution: Fedora 2 - 12
Posts: 8

Rep: Reputation: 0
SELinux and chroot jails


Hi.
I have never bothered with SELinux till now. I have been instructed to deploy SELinux on all new servers.

I have an Exim email server the is in a chroot jail. Now I have to enable SELinux. Does it need to be applied from within the chroot jail ? or should it be done from the host OS, and or both ? I have yet to find a howto on achieving this.

Thanks
 
Old 10-19-2010, 11:16 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,744
Blog Entries: 54

Rep: Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973
SELinux is enabled in the kernel. Working on your staging machine (not production), set up your chroot, label every item like in the main system, chroot the daemon then watch /var/log/audit/audit.log for violations. Cat the log through 'audit2allow' to see what's causing them.
 
  


Reply

Tags
chroot, exim, selinux


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Creating chroot sftp Jails with Jailkit LXer Syndicated Linux News 0 06-20-2008 06:41 PM
LXer: More than I ever wanted to know about chroot jails LXer Syndicated Linux News 0 05-23-2007 10:46 AM
ssh chroot jails vbsaltydog Linux - Security 3 06-09-2006 11:56 AM
chroot kits and jails dracolich Linux - Security 1 08-29-2005 07:52 AM
chroot jails and passwd control scottrell Linux - General 11 04-04-2003 11:06 AM


All times are GMT -5. The time now is 11:38 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration