presentation results

presentation results

[Ed Street]

[-- Attachment #1: Type: text/plain, Size: 435 bytes --]

Hello,

 

The presentation I gave went rather well considering everything.  The 2
biggest questions that came up where:

 

Documentation, is there any plans to have a printed book dealing with
selinux administration?

 

Is/will selinux be certified under Common Criteria and if so what level?

 

Ed


---

Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.677 / Virus Database: 439 - Release Date: 5/4/2004
 

[-- Attachment #2: Type: text/html, Size: 2614 bytes --]

Re: presentation results

[Tom]

On Sun, May 09, 2004 at 11:27:12PM -0400, Ed Street wrote:
>    Is/will selinux be certified under Common Criteria and if so what level?

You can't really certify "SELinux". You would certify an entire system,
one that happens to have SE enabled.

It will probably happen, the way SuSE and Redhat are both moving
forward with CC certifications for Linux.

-- 
http://web.lemuria.org/pubkey.html
pub  1024D/2D7A04F5 2002-05-16 Tom Vogt <tom@lemuria.org>
     Key fingerprint = C731 64D1 4BCF 4C20 48A4  29B2 BF01 9FA1 2D7A 04F5

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: presentation results

[todd glassey]

I would propose that one of the things that SELinus needs is something akin
to what the OpenGroup does with the UNIX certification suite...

Todd

----- Original Message ----- 
From: "Tom" <tom@lemuria.org>
To: "Ed Street" <edstreet@street-tek.com>
Cc: "'Selinux'" <selinux@tycho.nsa.gov>
Sent: Sunday, May 09, 2004 10:51 PM
Subject: Re: presentation results


> On Sun, May 09, 2004 at 11:27:12PM -0400, Ed Street wrote:
> >    Is/will selinux be certified under Common Criteria and if so what
level?
>
> You can't really certify "SELinux". You would certify an entire system,
> one that happens to have SE enabled.
>
> It will probably happen, the way SuSE and Redhat are both moving
> forward with CC certifications for Linux.
>
> -- 
> http://web.lemuria.org/pubkey.html
> pub  1024D/2D7A04F5 2002-05-16 Tom Vogt <tom@lemuria.org>
>      Key fingerprint = C731 64D1 4BCF 4C20 48A4  29B2 BF01 9FA1 2D7A 04F5
>
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov
with
> the words "unsubscribe selinux" without quotes as the message.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

presentation results

[Ed Street]

Hello,

Another question that was raised, someone ask if the file system is setup
like NTFS.  Anyone care to comment on this one?

Ed

---

Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.677 / Virus Database: 439 - Release Date: 5/4/2004
 


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Japanese Documentation(Re: presentation results)

[Yuichi Nakamura]

On Sun, 9 May 2004 23:27:12 -0400
"Ed Street" <edstreet@street-tek.com> wrote:
> Documentation, is there any plans to have a printed book dealing with
> selinux administration?

There are book and many articles in Japan.
Unfortunately, they are written in Japanese.
People who can read Japanese, please look at them.

1)
I wrote book about selinux.
"Complete guide to SELinux" printed by Nikkei BP in Mar 2004.
http://www.amazon.co.jp/exec/obidos/ASIN/4822221113/

2)
The latest free article is available on Web site of Nikkei BP, 
free member registration is necessary.
http://itpro.nikkeibp.co.jp/members/ITPro/oss/20040422/1/
It is based on Fedora Core2. 

3) Other free documents about SELinux
http://www.ipa.go.jp/security/fy14/contents/trusted-os/guide.html
http://localhost/selinux-web/document/article/article-top.html

In addition, in Japanese sourceforge site, 
RPMs and SELinux install package for FedoraCore1 are available.
http://sourceforge.jp/projects/selinux/files/
o Kernel rpm(2.4-based SELinux released in Apr 2004, patches for vulnerablities of linux-2.4.25 are applied.)
http://prdownloads.sourceforge.jp/selinux/9155/kernel-2.4.25-selinux1.p2.i386.rpm
http://prdownloads.sourceforge.jp/selinux/9156/kernel-2.4.25-selinux1.p2.src.rpm
o Install package with user land archive rpms(2.4-based SELinux released in Feb 2004)
http://prdownloads.sourceforge.jp/selinux/8631/selinux-20040223_install.tgz


-- 
---------
Yuichi Nakamura
Research & Development Department
Hitachi Software Engineering Co., Ltd.
http://www.selinux.hitachi-sk.co.jp/en

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Japanese Documentation(Re: presentation results)

[Tom]

On Tue, May 11, 2004 at 08:58:49AM +0900, Yuichi Nakamura wrote:
> On Sun, 9 May 2004 23:27:12 -0400
> "Ed Street" <edstreet@street-tek.com> wrote:
> > Documentation, is there any plans to have a printed book dealing with
> > selinux administration?
> 
> There are book and many articles in Japan.
> Unfortunately, they are written in Japanese.
> People who can read Japanese, please look at them.


Good point!

SELinux is _big_ in Japan. If we could manage to build a wider bridge
there, everyone would profit a lot. Unfortunately, the language barrier
is quite high.

Russell - maybe you could ask inside Redhat? I know that a couple guys
from Redhat Japan are doing SELinux work.


-- 
PGP/GPG key: http://web.lemuria.org/pubkey.html
pub  1024D/2D7A04F5 2002-05-16 Tom Vogt <tom@lemuria.org>
     Key fingerprint = C731 64D1 4BCF 4C20 48A4  29B2 BF01 9FA1 2D7A 04F5

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

RE: presentation results

[Ed Street]

Hello,

When I covered file/socket/process labels and how the domains worked one
person ask if this is like how the ntfs forest works.  I wasn't sure how to
respond so I said yes and no, there are similarities but there's a vast
amount of differences.

Ed

-----Original Message-----
From: Stephen Smalley [mailto:sds@epoch.ncsc.mil] 
Sent: Tuesday, May 11, 2004 9:17 AM
To: Ed Street
Subject: Re: presentation results

On Mon, 2004-05-10 at 20:26, Ed Street wrote:
> Another question that was raised, someone ask if the file system is setup
> like NTFS.  Anyone care to comment on this one?

I don't understand the question.  What were they asking?  SELinux has
nothing to do with NTFS.

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency

---

Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.677 / Virus Database: 439 - Release Date: 5/4/2004
 

---

Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.677 / Virus Database: 439 - Release Date: 5/4/2004
 


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

RE: presentation results

[Stephen Smalley]

On Tue, 2004-05-11 at 19:22, Ed Street wrote:
> When I covered file/socket/process labels and how the domains worked one
> person ask if this is like how the ntfs forest works.  I wasn't sure how to
> respond so I said yes and no, there are similarities but there's a vast
> amount of differences.

If I understand the question correctly, the answer is no.  TE domains
(an attribute of a process that organizes processes into security
equivalence classes) are completely unrelated and orthogonal to
administrative domains (groups of machines).

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.