Red Hat Bugzilla – Bug 403261
Need SELinux guide for RHEL5
Last modified: 2015-04-06 23:19:10 EDT
There's an excellent guide to SELinux on RHEL4 available from Red Hat:
I've implemented SELinux on chosen servers in a large RHEL-based infrastructure
of a customer.
However, I fear that migration to RHEL5 with its binary module, MLS policy and
changes in tools will be difficult, since Red Hat hasn't published an updated
guide for RHEL 5.
I think that this guide is essential to SELinux adoption on RHEL.
BTW, see also this opinion on TechTarget by Ken Milberg:
"Red Hat should publish more detailed documentation on SELinux and RHEL5: until
that happens, I fear that administrators will continue to shun SELinux."
No longer involved in RHEL Deployment Guide
queueing to majorworkqueue
I am working on an SELinux user guide for Fedora 10, which will eventually be forked for Red Hat Enterprise Linux:
Don't hesitate to let me know if there is anything in particular that you would like covered.
There should be detailed procedures and best practices on customising the policy (by building custom modules).
I've noticed that there are many more ready-made macros for various permissions, the documentation should contain general explanation of how they are designed (the naming conventions, the spirit that lies in their design and interrelations) and a detailed catalogue of all of them.
Changes in relation to SELinux policy between RHEL4 and RHEL5 should be described in detail and guidelines for migration of custom policy changes for RHEL4 to RHEL5 modular policy should be presented.
If there are changes in important macros (like object permission sets), they should always be mentioned in release notes.
All that should of course be on top of the stuff that was in the previous RHEL4 SELinux guide.
Thanks for the suggestions. The first release of the user guide is aimed at user-oriented tasks, not policy writing.
At the moment, "SELinux by Example" is the best book available for SELinux, and covers some of the items you want.
You might be interested in:
It has to be "forked" for Red Hat Enterprise Linux eventually.
The next SELinux User guide will be for Red Hat Enterprise Linux 6 and is brought over from Fedora. Closing this as WONTFIX. Any assistance you can offer with Fedora Docs to help improve quality and availability of the documentation is welcomed.