What exactly is SELinux?

abefroman · 04-10-2008, 11:05 PM

What exactly is SELinux?

Is it like the ACL's for grsecurity?

I have SELinux enabled one my server, but I am not sure its doing anything to help secure me, I guess I need to write policies for it?

TIA

brianmcgee · 04-11-2008, 01:03 AM

The official packages of Red Hat already contain predefined SELinux policies. So enabling it surely helps to secure your server.

I would also recommend that you copy the policies over your new files (e.g. the contents of your webserver)and later you may decide to create your own policies.

billymayday · 04-11-2008, 01:16 AM

Have a look at the SELinux docs on Fedora's site

abefroman · 04-11-2008, 07:38 AM

Quote:

Originally Posted by brianmcgee

The official packages of Red Hat already contain predefined SELinux policies. So enabling it surely helps to secure your server.

Can you post a sample of an additional policy that would be good to add?

brianmcgee · 04-13-2008, 02:11 PM

Have a look at http://www.nsa.gov/selinux/info/docs.cfm

There you will find additional SELinux examples.