[ << ]
[ < ]
[ Home ]
[ > ]
[ >> ]
2. Using Gentoo/Hardened SELinux
With the theoretic stuff behind us, let us start by installing Gentoo/Hardened
with a SELinux kernel as well as the SELinux tools.
Content:
-
Gentoo SELinux Installation / Conversion
To set up SELinux within Gentoo/Hardened, you first need to install Gentoo with
the correct Hardened profile (or convert to the Hardened profile) and then
update your system to become a SELinux-managed system. This chapter will guide
you through this process.
-
Configuring SELinux For Your Needs
With SELinux now "installed" and enabled (although in permissive mode), we now
configure it to suit your particular needs. After all, SELinux is a Mandatory
Access Control system where you, as security administrator, define what is
allowed and what not.
-
SELinux Commands
Let's take a step back and get to know a few more commands. We covered most of
them in the previous section, but we will now dive a bit deeper in its
syntax, features and potential pitfalls.
-
Permissive, Unconfined, Disabled or What Not...
Your system can be in many SELinux states. In this chapter, we help you switch
between the various states / policies.
-
Modifying the Gentoo Hardened SELinux Policy
Gentoo Hardened offers a default policy, but this might not allow what you want
(or allows too much). In this chapter we tell you how you can tweak Gentoo's
policy, or even run your own.
-
Troubleshooting SELinux
Everything made by a human can and will fail. In this chapter we will try to
keep track of all potential issues you might come across and how to resolve
them.
-
Change History
As documentation evolves with the technology, this handbook too sees its fair
share of changes. To allow users, who are already on SELinux, to verify if there
are any changes they need to be aware off, this chapter lists the changes in
chronological order.
[ << ]
[ < ]
[ Home ]
[ > ]
[ >> ]
The contents of this document, unless otherwise expressly stated, are licensed under the CC-BY-SA-2.5 license. The Gentoo Name and Logo Usage Guidelines apply.
|