* any selinux program and architeture books
@ 2014-01-07 16:02 bigclouds
2014-01-07 16:19 ` William Roberts
2014-01-07 16:26 ` Kernel freak
0 siblings, 2 replies; 6+ messages in thread
From: bigclouds @ 2014-01-07 16:02 UTC (permalink / raw)
To: selinux
[-- Attachment #1: Type: text/plain, Size: 401 bytes --]
hi,all
i have read some articales, but not comprehensive.
1. is there some articles which introduce the architeture of selinux,
use space and kernel space architeture , and how they communicate?
i want to know every parts of selinux and how they work with each other.
2.
any articales about how to write a policy(rule,module)?
i have read some, but still have many confusion
thanks very much.
[-- Attachment #2: Type: text/html, Size: 726 bytes --]
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: any selinux program and architeture books
2014-01-07 16:02 any selinux program and architeture books bigclouds
@ 2014-01-07 16:19 ` William Roberts
2014-01-07 21:05 ` Richard Haines
2014-01-07 16:26 ` Kernel freak
1 sibling, 1 reply; 6+ messages in thread
From: William Roberts @ 2014-01-07 16:19 UTC (permalink / raw)
To: bigclouds; +Cc: selinux@tycho nsa. gov
[-- Attachment #1: Type: text/plain, Size: 839 bytes --]
Here is what I usually use:
http://www.freetechbooks.com/the-selinux-notebook-the-foundations-t785.html
On Jan 7, 2014 8:05 AM, "bigclouds" <bigclouds@163.com> wrote:
> hi,all
> i have read some articales, but not comprehensive.
> 1. is there some articles which introduce the architeture of selinux,
> use space and kernel space architeture , and how they communicate?
> i want to know every parts of selinux and how they work with each other.
>
>
> 2.
> any articales about how to write a policy(rule,module)?
> i have read some, but still have many confusion
>
> thanks very much.
>
>
>
>
> _______________________________________________
> Selinux mailing list
> Selinux@tycho.nsa.gov
> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov.
> To get help, send an email containing "help" to
> Selinux-request@tycho.nsa.gov.
>
>
[-- Attachment #2: Type: text/html, Size: 1585 bytes --]
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: any selinux program and architeture books
2014-01-07 16:02 any selinux program and architeture books bigclouds
2014-01-07 16:19 ` William Roberts
@ 2014-01-07 16:26 ` Kernel freak
2014-01-07 17:07 ` Matthew Thode
1 sibling, 1 reply; 6+ messages in thread
From: Kernel freak @ 2014-01-07 16:26 UTC (permalink / raw)
To: bigclouds, selinux@tycho.nsa.gov
[-- Attachment #1: Type: text/plain, Size: 1077 bytes --]
On Tue, Jan 7, 2014 at 5:02 PM, bigclouds <bigclouds@163.com> wrote:
> hi,all
> i have read some articales, but not comprehensive.
> 1. is there some articles which introduce the architeture of selinux,
> use space and kernel space architeture , and how they communicate?
> i want to know every parts of selinux and how they work with each other.
>
I would recommend SELinux by example. It's an old book, but really nice to
understand SELinux. Some knowledge of Linux system is beneficial before
reading.
>
>
> 2.
> any articales about how to write a policy(rule,module)?
> i have read some, but still have many confusion
>
The above book surely should help. Download the policies and read it. Try
to tinker around in permissive mode, read the audit data. I believe that is
a good start. Have fun.
>
> thanks very much.
>
>
>
>
> _______________________________________________
> Selinux mailing list
> Selinux@tycho.nsa.gov
> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov.
> To get help, send an email containing "help" to
> Selinux-request@tycho.nsa.gov.
>
>
[-- Attachment #2: Type: text/html, Size: 2188 bytes --]
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: any selinux program and architeture books
2014-01-07 16:26 ` Kernel freak
@ 2014-01-07 17:07 ` Matthew Thode
2014-01-07 18:44 ` Daniel J Walsh
0 siblings, 1 reply; 6+ messages in thread
From: Matthew Thode @ 2014-01-07 17:07 UTC (permalink / raw)
To: selinux@tycho.nsa.gov
Kernel freak <kernelfreak@gmail.com> wrote:
>On Tue, Jan 7, 2014 at 5:02 PM, bigclouds <bigclouds@163.com> wrote:
>
>> hi,all
>> i have read some articales, but not comprehensive.
>> 1. is there some articles which introduce the architeture of
>selinux,
>> use space and kernel space architeture , and how they communicate?
>> i want to know every parts of selinux and how they work with each
>other.
>>
>I would recommend SELinux by example. It's an old book, but really nice
>to
>understand SELinux. Some knowledge of Linux system is beneficial before
>reading.
>
>>
>>
>> 2.
>> any articales about how to write a policy(rule,module)?
>> i have read some, but still have many confusion
>>
>The above book surely should help. Download the policies and read it.
>Try
>to tinker around in permissive mode, read the audit data. I believe
>that is
>a good start. Have fun.
>
>>
>> thanks very much.
>>
>>
>>
>>
>> _______________________________________________
>> Selinux mailing list
>> Selinux@tycho.nsa.gov
>> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov.
>> To get help, send an email containing "help" to
>> Selinux-request@tycho.nsa.gov.
>>
>>
>
>
>------------------------------------------------------------------------
>
>_______________________________________________
>Selinux mailing list
>Selinux@tycho.nsa.gov
>To unsubscribe, send email to Selinux-leave@tycho.nsa.gov.
>To get help, send an email containing "help" to
>Selinux-request@tycho.nsa.gov.
I liked Sven's book. He has some of the best documentation that I've seen. It was recently published so it is up to date as well.
http://www.amazon.com/gp/aw/d/1783283173/
-- Matthew Thode
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: any selinux program and architeture books
2014-01-07 17:07 ` Matthew Thode
@ 2014-01-07 18:44 ` Daniel J Walsh
0 siblings, 0 replies; 6+ messages in thread
From: Daniel J Walsh @ 2014-01-07 18:44 UTC (permalink / raw)
To: Matthew Thode, selinux@tycho.nsa.gov
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 01/07/2014 12:07 PM, Matthew Thode wrote:
> Kernel freak <kernelfreak@gmail.com> wrote:
>> On Tue, Jan 7, 2014 at 5:02 PM, bigclouds <bigclouds@163.com> wrote:
>>
>>> hi,all i have read some articales, but not comprehensive. 1. is there
>>> some articles which introduce the architeture of
>> selinux,
>>> use space and kernel space architeture , and how they communicate? i
>>> want to know every parts of selinux and how they work with each
>> other.
>>>
>> I would recommend SELinux by example. It's an old book, but really nice
>> to understand SELinux. Some knowledge of Linux system is beneficial
>> before reading.
>>
>>>
>>>
>>> 2. any articales about how to write a policy(rule,module)? i have read
>>> some, but still have many confusion
>>>
>> The above book surely should help. Download the policies and read it.
>> Try to tinker around in permissive mode, read the audit data. I believe
>> that is a good start. Have fun.
>>
>>>
>>> thanks very much.
>>>
>>>
>>>
>>>
>>> _______________________________________________ Selinux mailing list
>>> Selinux@tycho.nsa.gov To unsubscribe, send email to
>>> Selinux-leave@tycho.nsa.gov. To get help, send an email containing
>>> "help" to Selinux-request@tycho.nsa.gov.
>>>
>>>
>>
>>
>> ------------------------------------------------------------------------
>>
>> _______________________________________________ Selinux mailing list
>> Selinux@tycho.nsa.gov To unsubscribe, send email to
>> Selinux-leave@tycho.nsa.gov. To get help, send an email containing "help"
>> to Selinux-request@tycho.nsa.gov.
>
> I liked Sven's book. He has some of the best documentation that I've seen.
> It was recently published so it is up to date as well.
>
> http://www.amazon.com/gp/aw/d/1783283173/ -- Matthew Thode
>
> _______________________________________________ Selinux mailing list
> Selinux@tycho.nsa.gov To unsubscribe, send email to
> Selinux-leave@tycho.nsa.gov. To get help, send an email containing "help"
> to Selinux-request@tycho.nsa.gov.
>
I didn't know this was published. Just tweeted it out.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlLMSvkACgkQrlYvE4MpobP8UACg5aWJDAZvi2vDuKxIvos4jYqF
xK0AnjOtJowoKqWMXe62dCJ07KN/uztV
=SeDu
-----END PGP SIGNATURE-----
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: any selinux program and architeture books
2014-01-07 16:19 ` William Roberts
@ 2014-01-07 21:05 ` Richard Haines
0 siblings, 0 replies; 6+ messages in thread
From: Richard Haines @ 2014-01-07 21:05 UTC (permalink / raw)
To: bigclouds, William Roberts, selinux@tycho nsa. gov
Regarding the SELinux Notebook - I'm about to start the fourth edition for publication in about 4 - 6 months.
If anyone has any suggestions for improvement or additions please let me know and I'll see what
I can do. But please note its about SELinux components and how they hang together not
administration or how to write policy.
My current todo list is:
Multiple LSM support (as it may be all done by then)
Openswan/Libreswan config for labelled networking
Update CIL as it has changed and hopefully mainstream soon.
Update Android as many changes (but will probably be obsolete by publication !!)
General cleanup and add any new features found.
Richard
>________________________________
> From: William Roberts <bill.c.roberts@gmail.com>
>To: bigclouds <bigclouds@163.com>
>Cc: "selinux@tycho nsa. gov" <selinux@tycho.nsa.gov>
>Sent: Tuesday, 7 January 2014, 16:19
>Subject: Re: any selinux program and architeture books
>
>
>
>Here is what I usually use:
>http://www.freetechbooks.com/the-selinux-notebook-the-foundations-t785.html
>On Jan 7, 2014 8:05 AM, "bigclouds" <bigclouds@163.com> wrote:
>
>hi,all
>>i have read some articales, but not comprehensive.
>>1. is there some articles which introduce the architeture of selinux,
>>use space and kernel space architeture , and how they communicate?
>>i want to know every parts of selinux and how they work with each other.
>>
>>
>>2.
>>any articales about how to write a policy(rule,module)?
>>i have read some, but still have many confusion
>>
>>thanks very much.
>>
>>
>>
>>_______________________________________________
>>Selinux mailing list
>>Selinux@tycho.nsa.gov
>>To unsubscribe, send email to Selinux-leave@tycho.nsa.gov.
>>To get help, send an email containing "help" to Selinux-request@tycho.nsa.gov.
>>
>>
>_______________________________________________
>Selinux mailing list
>Selinux@tycho.nsa.gov
>To unsubscribe, send email to Selinux-leave@tycho.nsa.gov.
>To get help, send an email containing "help" to Selinux-request@tycho.nsa.gov.
>
>
>
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2014-01-07 21:07 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-01-07 16:02 any selinux program and architeture books bigclouds
2014-01-07 16:19 ` William Roberts
2014-01-07 21:05 ` Richard Haines
2014-01-07 16:26 ` Kernel freak
2014-01-07 17:07 ` Matthew Thode
2014-01-07 18:44 ` Daniel J Walsh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.