خرید و دانلود نسخه کامل کتاب SELinux Cookbook

Over 70 hands-on recipes to develop fully functional policies to confine your applications and users using SELinuxAbout This BookDesign custom SELinux policies and understand the reference policy interface constructions to build readable SELinux policy rulesExperience the wide range of security controls SELinux offers by customizing web application confinementStep-by-step recipes exploring the SELinux environmentWho This Book Is ForIf you are a Linux system administrator or a Linux-based service administrator and want to fine-tune SELinux to implement a supported, mature, and proven access control system, then this book is for you. Basic experience with SELinux enabled distributions is expected.What You Will LearnManage resource labels and fine-tune your policies to automatically handle labelingGain an insight into how to tune the web server SELinux policy for secure web application hostingLearn how to confine desktop applications through custom-built policiesProtect a server’s assets by creating your own service-specific SELinux policiesDiscover how to restrict users without hindering them by installing role-based access controlTroubleshoot and debug the behavior of SELinux-enabled applicationsIn DetailIn SELinux Cookbook, we cover everything from how to build SELinux policies to the integration of the technology with other systems and look at a wide range of examples to assist in creating additional policies. The first set of recipes work around file labeling as one of the most common and important SELinux administrative aspects. Then, we move on to custom policy development, showing how this is done for web application confinement, desktop application protection, and custom server policies. Next, we shift our focus to the end user, restricting user privileges and setting up role-based access controls. After that, we redirect our focus to the integration of SELinux with Linux systems, aligning SELinux with existing security controls on a Linux system. Finally, we will learn how applications interact with the SELinux subsystem internally; ensuring that whatever the challenge, we will be able to find the best solution.