SELinux System Administration, 2nd Edition

Book Description

Key Features

• Leverage SELinux to improve the secure state of your Linux system
• A clear approach to adopting SELinux within your organization
• Essential skills and techniques to help further your system administration career

Book Description

Do you have the crucial job of protecting your private and company systems from malicious attacks and undefined application behavior? Are you looking to secure your Linux systems with improved access controls? Look no further, intrepid administrator! This book will show you how to enhance your system’s secure state across Linux distributions, helping you keep application vulnerabilities at bay.

This book covers the core SELinux concepts and shows you how to leverage SELinux to improve the protection measures of a Linux system. You will learn the SELinux fundamentals and all of SELinux’s configuration handles including conditional policies, constraints, policy types, and audit capabilities. These topics are paired with genuine examples of situations and issues you may come across as an administrator. In addition, you will learn how to further harden the virtualization offering of both libvirt (sVirt) and Docker through SELinux.

By the end of the book you will know how SELinux works and how you can tune it to meet your needs.

What you will learn

• Analyze SELinux events and selectively enable or disable SELinux enforcement
• Manage Linux users and associate them with the right role and permission set
• Secure network communications through SELinux access controls
• Tune the full service flexibility by dynamically assigning resource labels
• Handle SELinux access patterns enforced through the system
• Query the SELinux policy in depth

Table of Contents

Chapter 1: Fundamental SELinux Concepts
Chapter 2: Understanding SELinux Decisions and Logging
Chapter 3: Managing User Logins
Chapter 4: Process Domains and File-Level Access Controls
Chapter 5: Controlling Network Communications
Chapter 6: sVirt and Docker Support
Chapter 7: D-Bus and systemd
Chapter 8: Working with SELinux Policies
Chapter 9: Analyzing Policy Behavior
Chapter 10: SELinux Use Cases

中文：

书名：SELinux系统管理，第2版

主要特点

• 利用SELinux改善您的Linux系统的安全状态
• 在您的组织中采用SELinux的明确方法
• 帮助您进一步发展系统管理职业生涯的基本技能和技巧

图书描述

您是否肩负着保护您的私人和公司系统免受恶意攻击和未定义应用程序行为的关键工作？您是否希望通过改进访问控制来保护您的Linux系统？不用再看了，勇敢的管理员！本书将向您展示如何跨Linux发行版增强系统的安全状态，帮助您防范应用程序漏洞。

本书介绍了SELinux的核心概念，并向您展示了如何利用SELinux来改进Linux系统的保护措施。您将学习SELinux基础知识和SELinux的所有配置句柄，包括条件策略、约束、策略类型和审核功能。这些主题与您作为管理员可能遇到的情况和问题的真实示例配对。此外，您还将学习如何通过SELinux进一步强化libvirt(SVirt)和Docker的虚拟化产品。

本书结束时，您将了解SELinux是如何工作的，以及如何调整它以满足您的需求。

你将学到什么

• 分析SELinux事件并有选择地启用或禁用SELinux强制
• 管理Linux用户并将他们与正确的角色和权限集相关联
• 通过SELinux访问控制保护网络通信
• 通过动态分配资源标签来调整全面的服务灵活性
• Handle SELinux access patterns enforced through the system
• Query the SELinux policy in depth

目录表

第1章：SELinux的基本概念
第2章：了解SELinux决策和日志记录
Chapter 3: Managing User Logins
第4章：过程域和文件级访问控制
第5章：控制网络通信
Chapter 6: sVirt and Docker Support
Chapter 7: D-Bus and systemd
第8章：使用SELinux策略
Chapter 9: Analyzing Policy Behavior
Chapter 10: SELinux Use Cases