skip to content
SELinux System Administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux Preview this item
ClosePreview this item
Checking...

SELinux System Administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux

Author: Sven Vermeulen
Publisher: Birmingham, UK : Packt Publishing, 2016.
Edition/Format:   eBook : Document : English : Second editionView all editions and formats
Summary:
Annotation
Rating:

(not yet rated) 0 with reviews - Be the first.

Subjects
More like this

Find a copy online

Links to this item

Find a copy in the library

&AllPage.SpinnerRetrieving; Finding libraries that hold this item...

Details

Genre/Form: Electronic books
Additional Physical Format: Print version:
Vermeulen, Sven.
SELinux system administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux.
Birmingham, England ; Mumbai, India : Packt Publishing, ©2016
276 pages
Material Type: Document, Internet resource
Document Type: Internet Resource, Computer File
All Authors / Contributors: Sven Vermeulen
ISBN: 9781787127067 1787127060 1787126951 9781787126954
OCLC Number: 969172197
Description: 1 online resource (1 volume) : illustrations
Contents: Cover ; Credits; About the Author; About the Reviewers; www.PacktPub.com; Table of Contents; Preface; Chapter 1: Fundamental SELinux Concepts ; Providing more security to Linux; Using Linux security modules; Extending regular DAC with SELinux; Restricting root privileges; Reducing the impact of vulnerabilities; Enabling SELinux support; Labeling all resources and objects; Dissecting the SELinux context; Enforcing access through types; Granting domain access through roles; Limiting roles through users; Controlling information flow through sensitivities; Defining and distributing policies. Writing SELinux policiesDistributing policies through modules; Bundling modules in a policy store; Distinguishing between policies; Supporting MLS; Dealing with unknown permissions; Supporting unconfined domains; Limiting cross-user sharing; Incrementing policy versions; Different policy content; Summary; Chapter 2: Understanding SELinux Decisions and Logging ; Switching SELinux on and off; Setting the global SELinux state; Switching to permissive (or enforcing) mode; Using kernel boot parameters; Disabling SELinux protections for a single service; Understanding SELinux-aware applications. SELinux logging and auditingFollowing audit events; Uncovering more logging; Configuring Linux auditing; Configuring the local system logger; Reading SELinux denials; Other SELinux-related event types; USER_AVC; SELINUX_ERR; MAC_POLICY_LOAD; MAC_CONFIG_CHANGE; MAC_STATUS; NetLabel events; Labeled IPsec events; Using ausearch; Getting help with denials; Troubleshooting with setroubleshoot; Sending e-mails when SELinux denials occur; Using audit2why; Interacting with systemd-journal; Using common sense; Summary; Chapter 3: Managing User Logins ; User-oriented SELinux contexts. Understanding domain complexityQuerying for unconfined domains; SELinux users and roles; Listing SELinux user mappings; Mapping logins to SELinux users; Customizing logins towards services; Creating SELinux users; Listing accessible domains; Managing categories; Handling SELinux roles; Defining allowed SELinux contexts; Validating contexts with getseuser; Switching roles with newrole; Managing role access through sudo; Reaching other domains using runcon; Switching to the system role; SELinux and PAM; Assigning contexts through PAM; Prohibiting access during permissive mode. Polyinstantiating directoriesSummary; Chapter 4: Process Domains and File-Level Access Controls ; About SELinux file contexts; Getting context information; Interpreting SELinux context types; Keeping or ignoring contexts; Inheriting the default context; Querying transition rules; Copying and moving files; Temporarily changing file contexts; Placing categories on files and directories; Using multilevel security on files; Backing up and restoring extended attributes; Using mount options to set SELinux contexts; SELinux file context expressions; Using context expressions.
Responsibility: Sven Vermeulen.

Abstract:

Annotation

Ward off traditional security permissions and effectively secure your Linux systems with SELinuxAbout This Book Leverage SELinux to improve the secure state of your Linux system A clear approach to adopting SELinux within your organization Essential skills and techniques to help further your system administration careerWho This Book Is ForThis book is for Linux administrators who want to control the secure state of their systems. It's packed with the latest information on SELinux operations and administrative procedures so you'll be able to further harden your system through mandatory access control (MAC) a security strategy that has been shaping Linux security for years. What You Will Learn Analyze SELinux events and selectively enable or disable SELinux enforcement Manage Linux users and associate them with the right role and permission set Secure network communications through SELinux access controls Tune the full service flexibility by dynamically assigning resource labels Handle SELinux access patterns enforced through the system Query the SELinux policy in depthIn DetailDo you have the crucial job of protecting your private and company systems from malicious attacks and undefined application behavior? Are you looking to secure your Linux systems with improved access controls? Look no further, intrepid administrator! This book will show you how to enhance your system's secure state across Linux distributions, helping you keep application vulnerabilities at bay. This book covers the core SELinux concepts and shows you how to leverage SELinux to improve the protection measures of a Linux system. You will learn the SELinux fundamentals and all of SELinux's configuration handles including conditional policies, constraints, policy types, and audit capabilities. These topics are paired with genuine examples of situations and issues you may come across as an administrator. In addition, you will learn how to further harden the virtualization offering of both libvirt (sVirt) and Docker through SELinux. By the end of the book you will know how SELinux works and how you can tune it to meet your needs. Style and approachThis book offers a complete overview of SELinux administration and how it integrates with other components on a Linux system. It covers the majority of SELinux features with a mix of real life scenarios, descriptions, and examples. This book contains everything an administrator needs to customize SELinux.

Reviews

User-contributed reviews
Retrieving GoodReads reviews...
Retrieving DOGObooks reviews...

Tags

Be the first.
Confirm this request

You may have already requested this item. Please select Ok if you would like to proceed with this request anyway.

Linked Data


Primary Entity

<http://www.worldcat.org/oclc/969172197> # SELinux System Administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux
    a schema:MediaObject, schema:CreativeWork, schema:Book ;
    library:oclcnum "969172197" ;
    library:placeOfPublication <http://id.loc.gov/vocabulary/countries/enk> ;
    schema:about <http://experiment.worldcat.org/entity/work/data/1823516134#Topic/computer_networks_security_measures> ; # Computer networks--Security measures
    schema:about <http://experiment.worldcat.org/entity/work/data/1823516134#Topic/computers_security_networking> ; # COMPUTERS--Security--Networking
    schema:about <http://experiment.worldcat.org/entity/work/data/1823516134#CreativeWork/linux> ; # Linux.
    schema:about <http://dewey.info/class/005.432/e23/> ;
    schema:author <http://experiment.worldcat.org/entity/work/data/1823516134#Person/vermeulen_sven> ; # Sven Vermeulen
    schema:bookEdition "Second edition." ;
    schema:bookFormat schema:EBook ;
    schema:datePublished "2016" ;
    schema:description "Cover ; Credits; About the Author; About the Reviewers; www.PacktPub.com; Table of Contents; Preface; Chapter 1: Fundamental SELinux Concepts ; Providing more security to Linux; Using Linux security modules; Extending regular DAC with SELinux; Restricting root privileges; Reducing the impact of vulnerabilities; Enabling SELinux support; Labeling all resources and objects; Dissecting the SELinux context; Enforcing access through types; Granting domain access through roles; Limiting roles through users; Controlling information flow through sensitivities; Defining and distributing policies."@en ;
    schema:description "Annotation"@en ;
    schema:exampleOfWork <http://worldcat.org/entity/work/id/1823516134> ;
    schema:genre "Electronic books"@en ;
    schema:inLanguage "en" ;
    schema:isSimilarTo <http://worldcat.org/entity/work/data/1823516134#CreativeWork/selinux_system_administration_ward_off_traditional_security_permissions_and_effectively_secure_your_linuxs_systems_with_selinux> ;
    schema:name "SELinux System Administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux"@en ;
    schema:productID "969172197" ;
    schema:url <http://proxy.library.carleton.ca/login?url=http://proquest.safaribooksonline.com/?uiCode=carleton&xmlId=9781787126954> ;
    schema:url <https://ezproxy.spl.org/login?url=https://proquest.safaribooksonline.com/9781787126954> ;
    schema:url <http://search.ebscohost.com/login.aspx?direct=true&scope=site&db=nlebk&db=nlabk&AN=1441464> ;
    schema:url <https://proquest.safaribooksonline.com/9781787126954> ;
    schema:url <http://www.myilibrary.com?id=979773> ;
    schema:url <http://proquest.safaribooksonline.com/9781787126954> ;
    schema:url <http://public.ebookcentral.proquest.com/choice/publicfullrecord.aspx?p=4771731> ;
    schema:url <http://VH7QX3XE2P.search.serialssolutions.com/?V=1.0&L=VH7QX3XE2P&S=JCs&C=TC0001832438&T=marc&tab=BOOKS> ;
    schema:url <http://proquest.tech.safaribooksonline.de/9781787126954> ;
    schema:workExample <http://worldcat.org/isbn/9781787126954> ;
    schema:workExample <http://worldcat.org/isbn/9781787127067> ;
    wdrs:describedby <http://www.worldcat.org/title/-/oclc/969172197> ;
    .


Related Entities

<http://experiment.worldcat.org/entity/work/data/1823516134#Person/vermeulen_sven> # Sven Vermeulen
    a schema:Person ;
    schema:familyName "Vermeulen" ;
    schema:givenName "Sven" ;
    schema:name "Sven Vermeulen" ;
    .

<http://experiment.worldcat.org/entity/work/data/1823516134#Topic/computer_networks_security_measures> # Computer networks--Security measures
    a schema:Intangible ;
    schema:name "Computer networks--Security measures"@en ;
    .

<http://experiment.worldcat.org/entity/work/data/1823516134#Topic/computers_security_networking> # COMPUTERS--Security--Networking
    a schema:Intangible ;
    schema:name "COMPUTERS--Security--Networking"@en ;
    .

<http://proquest.tech.safaribooksonline.de/9781787126954>
    rdfs:comment "URL des Erstveröffentlichers" ;
    .

<http://worldcat.org/entity/work/data/1823516134#CreativeWork/selinux_system_administration_ward_off_traditional_security_permissions_and_effectively_secure_your_linuxs_systems_with_selinux>
    a schema:CreativeWork ;
    rdfs:label "SELinux system administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux." ;
    schema:description "Print version:" ;
    schema:isSimilarTo <http://www.worldcat.org/oclc/969172197> ; # SELinux System Administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux
    .

<http://worldcat.org/isbn/9781787126954>
    a schema:ProductModel ;
    schema:isbn "1787126951" ;
    schema:isbn "9781787126954" ;
    .

<http://worldcat.org/isbn/9781787127067>
    a schema:ProductModel ;
    schema:isbn "1787127060" ;
    schema:isbn "9781787127067" ;
    .

<http://www.worldcat.org/title/-/oclc/969172197>
    a genont:InformationResource, genont:ContentTypeGenericResource ;
    schema:about <http://www.worldcat.org/oclc/969172197> ; # SELinux System Administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux
    schema:dateModified "2018-11-25" ;
    void:inDataset <http://purl.oclc.org/dataset/WorldCat> ;
    .


Content-negotiable representations

Close Window

Please sign in to WorldCat 

Don't have an account? You can easily create a free account.