SELinux Testing Software/Scripts

[Alex Ackerman]

This may sound like an odd request, but I am currently working on my
master's thesis on the topic of SELinux integration into the workplace.
Part of the analysis involves testing the security containment
capabilities of SELinux; i.e., making sure that SELinux functions as
advertised when dealing with events of escalating privilege. Does anyone
on this list have any recommendations on scripts or programs which can
test these capabilities? My test platforms are Fedora Core 3 (once
released) and Red Hat Enterprise Linux v4.0 Beta 1. My current thinking
would be to downgrade certain packages (httpd, etc) to a known
vulnerable state and test, but would like to know how the members on the
list test their systems.  Any help would be appreciated.  I can be
reached at ackermal at jmu dot edu or alex at darkhonor dot com if you
would like to discuss this off-list.  Thank you for any assistance.

 

Alex Ackerman

James Madison University

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20041016/7a147564/attachment.htm>