changed:
-
SE Linux is a high security Linux system implementing Mandatory Access Control (MAC) among other things. It was originally created by the United States Government's National Security Agency. "The official NSA SE Linux webpage can be found here.":http://www.nsa.gov/selinux
SE Linux is being included in RedHat's distribution of Linux as of Fedora Core 2. "The Fedora Core 2 SE Linux FAQ is here.":http://people.redhat.com/kwade/fedora-docs/selinux-faq-en/index.html#id3284030
Notes from my debian installation. New fedora notes should be coming soon.
To add a new user:
suseradd
and make sure they are in
/etc/security/default_context
/etc/security/selinux/policy/users
<rjc> tessier_: The default policy should work for a play machine as long as
you make sure that you remove the root line in the user's file.
se_apt-get se_dpkg-reconfigure
se_dpkg se_dselect
sadminpasswd to change a users passwd
spasswd to change roots passwd
<rjc> tessier__: Use the type ROLE_home_ssh_t for the ~/.ssh directory and all files under it.