RE: New to SELinux: 2nd Edition of The SELinux Notebook released

RE: New to SELinux: 2nd Edition of The SELinux Notebook released

[Richard Haines]

I've just finished the 2nd edition of the SELinux Notebook that is available at:

http://www.freetechbooks.com/the-selinux-notebook-the-foundations-t785.html

It is aimed at those new to SELinux and as a reference for the policy language and configuration files.

If anyone has comments on how to improve, what other areas to cover, corrections etc. please let me know.

I'll now update the selinuxproject.org site with the new content as part of the SELinux documentation project.

 
The main updates are:
  Split the Notebook into two volumes:
   Volume 1 - The Foundations - covers SELinux and its supporting services.
   Volume 2 - Sample Policy Source - contains sample application and 
   policy source code to build a simple message filter and experiment with
   X-Windows.

 Updated all relevant sections to reflect Fedora 12 release and correct
 errors.
 Added secolors.conf and VM configuration files, typebounds Policy 
 language statement.

Added sections on:
XSELinux for X-Windows support and sample polyinstantiation code and policy.
Virtual machine support with examples.
SE-PostgreSQL support with an example database.
Apache / SELinux-Plus support.

Richard


--- On Tue, 11/5/10, Thomson, David-P63356 <David.Thomson@gdc4s.com> wrote:

> From: Thomson, David-P63356 <David.Thomson@gdc4s.com>
> Subject: RE: New to SELinux: how to get familiar
> To: "Daniel J Walsh" <dwalsh@redhat.com>, "Chad Sellers" <csellers@tresys.com>
> Cc: "Vacheh Sardarian" <vsardarian@gmail.com>, selinux@tycho.nsa.gov
> Date: Tuesday, 11 May, 2010, 18:27
> I actually filed an exception request
> for that last one with my company
> since they block livejournal traffic.  They assume
> you're not doing work
> if you go there.  Surprisingly, the google-cached
> version is still
> working and is the only way I can get to your stuff. 
> Good stuff though!
> 
> DT
> 
> -----Original Message-----
> From: Daniel J Walsh [mailto:dwalsh@redhat.com]
> 
> Sent: Tuesday, May 11, 2010 6:30 AM
> To: Chad Sellers
> Cc: Vacheh Sardarian; selinux@tycho.nsa.gov;
> Thomson, David-P63356
> Subject: Re: New to SELinux: how to get familiar
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> http://docs.fedoraproject.org/selinux-user-guide/f12/en-US/
> http://docs.fedoraproject.org/selinux-user-guide/f12/en-US/
> 
> And my favorite...
> 
> http://danwalsh.livejournal.com
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.14 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
> 
> iEYEARECAAYFAkvpW8AACgkQrlYvE4MpobPbxgCgzYMsZn6J7xojpL05PjV0ubSF
> rP8AoKJm1UvqSVDwPP06NE3p2M78rZlX
> =oATs
> -----END PGP SIGNATURE-----
> 
> 
> --
> This message was distributed to subscribers of the selinux
> mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov
> with
> the words "unsubscribe selinux" without quotes as the
> message.
>




--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: New to SELinux: 2nd Edition of The SELinux Notebook released

[Dominick Grift]

[-- Attachment #1: Type: text/plain, Size: 3790 bytes --]

On Wed, May 12, 2010 at 12:40:23PM +0000, Richard Haines wrote:
> I've just finished the 2nd edition of the SELinux Notebook that is available at:
> 
> http://www.freetechbooks.com/the-selinux-notebook-the-foundations-t785.html
> 
> It is aimed at those new to SELinux and as a reference for the policy language and configuration files.
> 
> If anyone has comments on how to improve, what other areas to cover, corrections etc. please let me know.
> 
> I'll now update the selinuxproject.org site with the new content as part of the SELinux documentation project.
> 
>  
> The main updates are:
>   Split the Notebook into two volumes:
>    Volume 1 - The Foundations - covers SELinux and its supporting services.
>    Volume 2 - Sample Policy Source - contains sample application and 
>    policy source code to build a simple message filter and experiment with
>    X-Windows.
> 
>  Updated all relevant sections to reflect Fedora 12 release and correct
>  errors.
>  Added secolors.conf and VM configuration files, typebounds Policy 
>  language statement.
> 
> Added sections on:
> XSELinux for X-Windows support and sample polyinstantiation code and policy.
> Virtual machine support with examples.
> SE-PostgreSQL support with an example database.
> Apache / SELinux-Plus support.
> 
> Richard
> 

That looks pretty darn thorough, thanks. I have been playing with an idea for a follow up to Fedora SELinux user guide as well.
However i am too bad of a writer and too chaotic to put the right pieces together for a comprehensive manual.

If you or anyone else for that matter would like to help get it done, please let me know.



> 
> --- On Tue, 11/5/10, Thomson, David-P63356 <David.Thomson@gdc4s.com> wrote:
> 
> > From: Thomson, David-P63356 <David.Thomson@gdc4s.com>
> > Subject: RE: New to SELinux: how to get familiar
> > To: "Daniel J Walsh" <dwalsh@redhat.com>, "Chad Sellers" <csellers@tresys.com>
> > Cc: "Vacheh Sardarian" <vsardarian@gmail.com>, selinux@tycho.nsa.gov
> > Date: Tuesday, 11 May, 2010, 18:27
> > I actually filed an exception request
> > for that last one with my company
> > since they block livejournal traffic.  They assume
> > you're not doing work
> > if you go there.  Surprisingly, the google-cached
> > version is still
> > working and is the only way I can get to your stuff. 
> > Good stuff though!
> > 
> > DT
> > 
> > -----Original Message-----
> > From: Daniel J Walsh [mailto:dwalsh@redhat.com]
> > 
> > Sent: Tuesday, May 11, 2010 6:30 AM
> > To: Chad Sellers
> > Cc: Vacheh Sardarian; selinux@tycho.nsa.gov;
> > Thomson, David-P63356
> > Subject: Re: New to SELinux: how to get familiar
> > 
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> > 
> > http://docs.fedoraproject.org/selinux-user-guide/f12/en-US/
> > http://docs.fedoraproject.org/selinux-user-guide/f12/en-US/
> > 
> > And my favorite...
> > 
> > http://danwalsh.livejournal.com
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v2.0.14 (GNU/Linux)
> > Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
> > 
> > iEYEARECAAYFAkvpW8AACgkQrlYvE4MpobPbxgCgzYMsZn6J7xojpL05PjV0ubSF
> > rP8AoKJm1UvqSVDwPP06NE3p2M78rZlX
> > =oATs
> > -----END PGP SIGNATURE-----
> > 
> > 
> > --
> > This message was distributed to subscribers of the selinux
> > mailing list.
> > If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov
> > with
> > the words "unsubscribe selinux" without quotes as the
> > message.
> >
> 
> 
> 
> 
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.

[-- Attachment #2: Type: application/pgp-signature, Size: 198 bytes --]