From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id s07IiEob025220 for ; Tue, 7 Jan 2014 13:44:14 -0500 Message-ID: <52CC4AF9.2020506@redhat.com> Date: Tue, 07 Jan 2014 13:44:09 -0500 From: Daniel J Walsh MIME-Version: 1.0 To: Matthew Thode , "selinux@tycho.nsa.gov" Subject: Re: any selinux program and architeture books References: <65cf2643.129fb.1436d70a048.Coremail.bigclouds@163.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1 List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 01/07/2014 12:07 PM, Matthew Thode wrote: > Kernel freak wrote: >> On Tue, Jan 7, 2014 at 5:02 PM, bigclouds wrote: >> >>> hi,all i have read some articales, but not comprehensive. 1. is there >>> some articles which introduce the architeture of >> selinux, >>> use space and kernel space architeture , and how they communicate? i >>> want to know every parts of selinux and how they work with each >> other. >>> >> I would recommend SELinux by example. It's an old book, but really nice >> to understand SELinux. Some knowledge of Linux system is beneficial >> before reading. >> >>> >>> >>> 2. any articales about how to write a policy(rule,module)? i have read >>> some, but still have many confusion >>> >> The above book surely should help. Download the policies and read it. >> Try to tinker around in permissive mode, read the audit data. I believe >> that is a good start. Have fun. >> >>> >>> thanks very much. >>> >>> >>> >>> >>> _______________________________________________ Selinux mailing list >>> Selinux@tycho.nsa.gov To unsubscribe, send email to >>> Selinux-leave@tycho.nsa.gov. To get help, send an email containing >>> "help" to Selinux-request@tycho.nsa.gov. >>> >>> >> >> >> ------------------------------------------------------------------------ >> >> _______________________________________________ Selinux mailing list >> Selinux@tycho.nsa.gov To unsubscribe, send email to >> Selinux-leave@tycho.nsa.gov. To get help, send an email containing "help" >> to Selinux-request@tycho.nsa.gov. > > I liked Sven's book. He has some of the best documentation that I've seen. > It was recently published so it is up to date as well. > > http://www.amazon.com/gp/aw/d/1783283173/ -- Matthew Thode > > _______________________________________________ Selinux mailing list > Selinux@tycho.nsa.gov To unsubscribe, send email to > Selinux-leave@tycho.nsa.gov. To get help, send an email containing "help" > to Selinux-request@tycho.nsa.gov. > I didn't know this was published. Just tweeted it out. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlLMSvkACgkQrlYvE4MpobP8UACg5aWJDAZvi2vDuKxIvos4jYqF xK0AnjOtJowoKqWMXe62dCJ07KN/uztV =SeDu -----END PGP SIGNATURE-----