Fedora Linux Support Community & Resources Center

Go Back   FedoraForum.org > Fedora 19/20 > Security and Privacy
FedoraForum Search

Forgot Password? Join Us!

Security and Privacy Sadly, malware, spyware, hackers and privacy threats abound in today's world. Let's be paranoid and secure our penguins, and slam the doors on privacy exploits.

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 15th January 2011, 10:45 PM
Japplo Offline
Registered User
 
Join Date: Sep 2010
Posts: 76
windows_vistafirefox
Selinux Profile

Hi! I have some questions regarding selinux. Is it possible to create a selinux profile for a program like with Apparmor?
Reply With Quote
  #2  
Old 16th January 2011, 05:37 PM
domg472 Offline
SELinux Contributor
 
Join Date: May 2008
Posts: 623
linuxfedorafirefox
Re: Selinux Profile

I have no experience with apparmor but you can create sandboxes(profiles?) for your applications with selinux
__________________
Come join us on #fedora-selinux on irc.freenode.org
http://docs.fedoraproject.org/selinu...ide/f10/en-US/
Reply With Quote
  #3  
Old 16th January 2011, 05:48 PM
bodhi.zazen Offline
Registered User
 
Join Date: Jul 2006
Location: Montana
Posts: 731
unknownunknown
Re: Selinux Profile

Quote:
Originally Posted by Japplo View Post
Hi! I have some questions regarding selinux. Is it possible to create a selinux profile for a program like with Apparmor?
Yes, but the syntax and terminology are not as easy to understand.

Start by reading on how selinux works.

http://fedoraproject.org/wiki/SELinux

http://docs.fedoraproject.org/en-US/...nhanced_Linux/

http://docs.fedoraproject.org/en-US/...ined_Services/

Then read on how to write a policy. The end of this document covers the basics

http://wiki.centos.org/HowTos/SELinux

See also this discussion

http://serverfault.com/questions/158...derstanding-it

and dan walsh's blog
__________________
If it is not broken, tweak it... If you break Fedora you get to keep both pieces :p
Reply With Quote
  #4  
Old 16th January 2011, 06:31 PM
Japplo Offline
Registered User
 
Join Date: Sep 2010
Posts: 76
windows_vistafirefox
Re: Selinux Profile

I'v read many sites of selinux and I don't know how it exactly works. I like to create a profile for example for pokerth. Can I easy deny the internet-access for an application?? What I need, is I think a step-tp-step How-To.
Reply With Quote
  #5  
Old 16th January 2011, 08:37 PM
domg472 Offline
SELinux Contributor
 
Join Date: May 2008
Posts: 623
linuxfedorafirefox
Re: Selinux Profile

There is no step by step howto. There is a book that tries to explain some policy writing but it is a bit outdated and it costs money (http://www.selinuxbyexample.com)

I guess i could help you write a policy, and although that may give you some insight, do not expect that it will make everything clear about selinux.

If you want some guidance, you can come see me on irc (irc.freenode.org channel #fedora-selinux) my nick name there is dgrift

policy writing in itself is not so hard but it requiires knowledge about security, computer security and the linux system. also it requires that you know the basics and not so basics of selinux.
__________________
Come join us on #fedora-selinux on irc.freenode.org
http://docs.fedoraproject.org/selinu...ide/f10/en-US/
Reply With Quote
Reply

Tags
profile, selinux

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
selinux: hand tweaking policieand yum selinux-policy updates: overriden or perserved? mbiggerstaff Security and Privacy 2 20th January 2014 08:52 PM
ksh and /etc/profile kgalbraith Using Fedora 6 26th May 2010 06:04 PM
My profile is gone !! hermouche Using Fedora 2 2nd April 2009 02:53 PM
Problem configuring SElinux using system-config-selinux GUI majdi Servers & Networking 0 6th September 2008 11:33 AM
Test 3 w7o selinux installed, though lotsa selinux during usage? gafami Fedora Core 2 Test Releases 7 15th May 2004 08:15 AM


Current GMT-time: 12:53 (Wednesday, 23-04-2014)

TopSubscribe to XML RSS for all Threads in all ForumsFedoraForumDotOrg Archive
logo

All trademarks, and forum posts in this site are property of their respective owner(s).
FedoraForum.org is privately owned and is not directly sponsored by the Fedora Project or Red Hat, Inc.

Privacy Policy | Term of Use | Posting Guidelines | Archive | Contact Us | Founding Members

Powered by vBulletin® Copyright ©2000 - 2012, vBulletin Solutions, Inc.

FedoraForum is Powered by RedHat