Re: beginner to SE Linux policy

[Daniel J Walsh <dwalsh redhat com>]

Mark wrote:
> Thanks for the help.  I just want to become more familiar with SE 
> Linux and understand the context of the te, fe, if..etc files and how 
> I can modify them so that my programs are more secure.  There just 
> seems to be alot of information that may or may not be related in 
> order to help me.  For instance, there is the seedit tools, SLIDE and 
> RedHat tools available.  Also, which is a better distribution to learn 
> SE Linux, CentOS or Fedora Core?
>
> I am an application developer who really just needs to learn how to 
> write policies for the programs I am developing.  Things like 
> policies, domains and domain transition are important areas I really 
> want to learn.
>
> Thanks for the help.
>
> PS.  I ordered the SE Linux by Example yesterday!
> --
> ..Cheers
> Mark
You might want to try system-config-selinux/polgengui to build you a 
policy template. 
> On 7/28/07, *shahbaz khan* <shazalive gmail com 
> <mailto:shazalive gmail com>> wrote:
>
>     Mark
>      
>     Selinux by example is the best answer to ur stated problem. NSA
>     documents will give u a good background because things have been
>     changing alot. Do not miss tresys' reference policy and policy
>     managemnt server. U can get more info about it from tresys'
>     website. Once u start to get aquainted with selinux this mailing
>     list will be more useful to u. Also join fedora selinux mailing list.
>      
>     I am not sure which policy analysis tool will be more useful to u.
>     Why dont u right a more specific question to this list w.r.t.
>     policy analysis tools. U might get good answers from selinux by
>     example.
>      
>     Shaz.
>
>      
>
>
>     On 7/28/07, *Mark* <elihusmails gmail com
>     <mailto:elihusmails gmail com>> wrote:
>
>         I have seen programs that will help me to edit and analyze SE
>         Linux policies.  What I am interested in is a resource that
>         will help me understand what a policy does and how to write
>         them.  At least for me, learning at the code level and not
>         using GUI tools helps me to understand things better. 
>
>         So what resources are out there for me to start looking at?
>
>         Thanks in advance.
>         Mark
>
>
>
> ------------------------------------------------------------------------
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list redhat com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list