"selinux" "8" "29 2005" "dwalsh (at] redhat.com" " SELinux"
""
SELinux - Linux NSA (SELinux)
.
""
Linux NSA -
Linux. SELinux
,
Type Enforcement ( ),
Role-Based Access Control ( ) Multi-Level Security
( ).
SELinux http://
www.nsa.gov/
research/
selinux.
/etc/selinux/config SELinux , SELinux ,
- .
SELINUX , ,
. , SELinux
, - SELinux.
SELinux ,
, ,
. SELinux ,
.
,
, - ,
.
/etc/selinux/config , . SELinux
, .
SELinux, ,
(targeted), (mls).
,
, , . ,
,
apache
. MLS (Multi-Level Security),
. MLS ,
, .
, ,
SELINUXTYPE
/etc/selinux/config . , ,
, .
/etc/selinux/{SELINUXTYPE}/ .
SELinux
.
\%system-config-selinux .
, SELinux, man- SELinux
.
.
" "
, , ... /. .
SELinux - . , SELinux. , file_t, .
/.autorelabel .
system-config-selinux . ,
restorecon / fixfiles. .
/etc/selinux/config .
" "
.ad l
.nh
booleans (8), setsebool (8), sepolicy (8), system-config-selinux (8), togglesebool (8), restorecon (8), fixfiles (8), setfiles (8), semanage (8), sepolicy (8)
man-c :
<servicename>_selinux (8)
, httpd
httpd_selinux (8).
man -k selinux
man- SELinux.
Dan Walsh <dwalsh (at] redhat.com>.
<gammaray (at] basealt.ru>.