NSA Logotype

Configuring the SELinux Policy


  Security Enhanced Linux
  Overview
Line Spacer
What's New
Line Spacer
Frequently Asked Questions
Line Spacer
Background
Line Spacer
Documentation
Line Spacer
License
Line Spacer
Download
Line Spacer
Participating
Line Spacer
  Mail List Archives
Line Spacer
Remaining Work
Line Spacer
Contributors
Line Spacer
Security Enhanced Linux Press Release
Line Spacer
About NSA
Line Spacer
Employment Opportunities
Line Spacer
NSA Home Page
 

Stephen Smalley (NAI Labs)

Initial version: February 2002, Last revised: January 2003

Abstract

This technical report describes how to configure the SELinux security policy for the example security server. It begins by explaining concepts defined by the Flask architecture that are important to configuring the policy. The report then describes the security model implemented by the example security server. The policy language and the example policy configuration are then described. The report explains how the policy is built and applied to the system. Security-aware applications and their configurations are discussed. Finally, the report describes how to customize the policy for various purposes.


About NSA   Employment Opportunities   INFOSEC   History   Releases
Line Spacer
National Cryptologic Museum   Mathematics & Education   Tech Transfer

 NSA Seal