Configuring the SELinux Policy

Stephen Smalley (NAI Labs)

Initial version: February 2002, Last revised: February 2005

Abstract

This technical report describes how to configure the SELinux security policy for the example security server. It begins by explaining concepts defined by the Flask architecture that are important to configuring the policy. The report then describes the security model implemented by the example security server. The policy language and the example policy configuration are then described. The report explains how the policy is built and applied to the system. Security-aware applications and their configurations are discussed. Finally, the report describes how to customize the policy for various purposes.

• Portable Document Format (PDF)*
• Postscript
• HTML

* To view documents stored as Portable Document Format (PDF) files your local computer must have a viewer application or a Web browser plug-in that supports the PDF file format.

Linux is a registered trademark of Linus Torvalds
NAI is a trademark of Networks Associates Technology, Inc.