Red Hat ENTERPRISE LINUX 4 - SELINUX GUIDE Manual page 126

112
P
performance tuning, 73
how to, 89
permissions
common sets, 10
definition, 10
policy
boot, 7
files and directories, 6
how it works, 5
internal functions, 5
overview, 5
targeted, 29
required packages, 5
system start-up
(See boot)
writing policy, 99
policy analysis
direct information flow, 88
domain transition analysis, 88
policy components, 84
TE rule analysis, 85
TE rules, 84
tools
apol, 83
seaudit, 76
policy and
roles, 24
users, 24
policy build
what is, 93
prerequisite knowledge, ii
ps command
using with SELinux, 56
R
rebooting
how to know when to reboot, 70
references, 103
Flask, 103
NSA, 103
SELinux, 103
registering your subscription, vii
relabeling
entire file systems, 62
files or directories, 57
roles, 24
assuming a new role, 69
targeted policy members, 43
roles and user
targeted policy, 43
rule analysis
(See TE rule analysis)
running a command in a specific context
how to, 68
running a different policy
how to, 67
S
seaudit
how to use, 76
security contexts
and the kernel, 9
file systems, 8
security types
dhcpd, 48
security.selinux, 8
SELinux
(See explained)
and Flask, 3
and LSM, 3
architecture, 1
compiling, 91
control methods, 55
documentation references
(See references)
history of, 107
maintenance, 55
tools, 73
what is, i
SELinux files and directories, 30
what are, iii
SELinux status
how to, 62
selinuxfs file system, 27
setting the context for a file system
how to, 68
shell scripts
enabling or disabling SELinux, 65
useful commands, 69
start-up
(See boot)
start-up procedure
(See boot)
subscription registration, vii
summary
policy, 5
syntax
access vector rule, 19
attribute declaration, 12
avc: denied message, 20
constraint, 26
file context description, 38
network declaration, 34
neverallow rule, 20
object class access vector definitions, 12
object class sets, 11
role allow, 25