SELinux System Administration
by Sven Vermeulen · first published 2013
3mentions
2recommended by
2HN commenters
2024first – last mentioned
100% recommend
Affiliate links. As an Amazon Associate I earn from qualifying purchases.
If you just want to maintain or operate what's already there on a RHEL (clone): https://docs.redhat.com/en/documentation/red_hat_enterprise_... If you want to dive deeper: "SELinux System Administration" by Sven Vermeulen.
on “The Insecurity of Debian” ↗Not excusing that state of documentation by any means, but a good starting point for understanding the actual policy for me was "SELinux System Administration" (ISBN 978-1-80020-147-7). It won't carry you all the way to applying policies via Ansible or RPM packages, but definitely took me from running random audit2allow commands to taking a more holistic view…
on “The Insecurity of Debian” ↗I mentioned elsewhere in the thread, I (well, my employer) picked up a copy of a book on SELinux System Administration (that's the title) and it has served just this function for me. It won't make you an expert but it takes the voodoo out of the whole process, if that makes sense. And it is reasonably short if you skip…
on “The Insecurity of Debian” ↗