SELinux System Administration :: ward off traditional security permissions and effectively secure your Linuxs systems with SELinux /
Annotation
Gespeichert in:
| 1. Verfasser: | |
|---|---|
| Format: | Elektronisch E-Book |
| Sprache: | English |
| Veröffentlicht: |
Birmingham, UK :
Packt Publishing,
2016.
|
| Ausgabe: | Second edition. |
| Schlagworte: | |
| Online-Zugang: | Volltext |
| Zusammenfassung: | Annotation |
| Beschreibung: | 1 online resource (1 volume) : illustrations |
| ISBN: | 9781787127067 1787127060 1787126951 9781787126954 |
Internformat
MARC
| LEADER | 00000cam a2200000 i 4500 | ||
|---|---|---|---|
| 001 | ZDB-4-EBA-ocn969172197 | ||
| 003 | OCoLC | ||
| 005 | 20241004212047.0 | ||
| 006 | m o d | ||
| 007 | cr unu|||||||| | ||
| 008 | 170119s2016 enka o 000 0 eng d | ||
| 040 | |a UMI |b eng |e rda |e pn |c UMI |d OCLCF |d IDEBK |d STF |d OCLCQ |d COO |d VT2 |d N$T |d OCLCO |d EBLCP |d YDX |d MERUC |d REB |d CHVBK |d UOK |d CEF |d KSU |d DEBBG |d WYU |d OCLCQ |d OCLCO |d UAB |d OCLCQ |d OCLCO |d OCLCQ |d OCLCO |d OCLCQ | ||
| 019 | |a 967095068 |a 972541212 |a 973807309 |a 973898082 |a 974359071 |a 974594929 |a 975077517 | ||
| 020 | |a 9781787127067 |q (electronic bk.) | ||
| 020 | |a 1787127060 |q (electronic bk.) | ||
| 020 | |a 1787126951 |q (electronic bk.) | ||
| 020 | |a 9781787126954 |q (electronic bk.) | ||
| 020 | |z 9781787126954 | ||
| 035 | |a (OCoLC)969172197 |z (OCoLC)967095068 |z (OCoLC)972541212 |z (OCoLC)973807309 |z (OCoLC)973898082 |z (OCoLC)974359071 |z (OCoLC)974594929 |z (OCoLC)975077517 | ||
| 037 | |a CL0500000819 |b Safari Books Online | ||
| 050 | 4 | |a QA76.774.L46 | |
| 072 | 7 | |a COM |x 043050 |2 bisacsh | |
| 082 | 7 | |a 005.432 |2 23 | |
| 049 | |a MAIN | ||
| 100 | 1 | |a Vermeulen, Sven, |e author. | |
| 245 | 1 | 0 | |a SELinux System Administration : |b ward off traditional security permissions and effectively secure your Linuxs systems with SELinux / |c Sven Vermeulen. |
| 250 | |a Second edition. | ||
| 264 | 1 | |a Birmingham, UK : |b Packt Publishing, |c 2016. | |
| 300 | |a 1 online resource (1 volume) : |b illustrations | ||
| 336 | |a text |b txt |2 rdacontent | ||
| 337 | |a computer |b c |2 rdamedia | ||
| 338 | |a online resource |b cr |2 rdacarrier | ||
| 588 | 0 | |a Online resource; title from cover (viewed January 18, 2017). | |
| 505 | 0 | |a Cover ; Credits; About the Author; About the Reviewers; www.PacktPub.com; Table of Contents; Preface; Chapter 1: Fundamental SELinux Concepts ; Providing more security to Linux; Using Linux security modules; Extending regular DAC with SELinux; Restricting root privileges; Reducing the impact of vulnerabilities; Enabling SELinux support; Labeling all resources and objects; Dissecting the SELinux context; Enforcing access through types; Granting domain access through roles; Limiting roles through users; Controlling information flow through sensitivities; Defining and distributing policies. | |
| 505 | 8 | |a Writing SELinux policiesDistributing policies through modules; Bundling modules in a policy store; Distinguishing between policies; Supporting MLS; Dealing with unknown permissions; Supporting unconfined domains; Limiting cross-user sharing; Incrementing policy versions; Different policy content; Summary; Chapter 2: Understanding SELinux Decisions and Logging ; Switching SELinux on and off; Setting the global SELinux state; Switching to permissive (or enforcing) mode; Using kernel boot parameters; Disabling SELinux protections for a single service; Understanding SELinux-aware applications. | |
| 505 | 8 | |a SELinux logging and auditingFollowing audit events; Uncovering more logging; Configuring Linux auditing; Configuring the local system logger; Reading SELinux denials; Other SELinux-related event types; USER_AVC; SELINUX_ERR; MAC_POLICY_LOAD; MAC_CONFIG_CHANGE; MAC_STATUS; NetLabel events; Labeled IPsec events; Using ausearch; Getting help with denials; Troubleshooting with setroubleshoot; Sending e-mails when SELinux denials occur; Using audit2why; Interacting with systemd-journal; Using common sense; Summary; Chapter 3: Managing User Logins ; User-oriented SELinux contexts. | |
| 505 | 8 | |a Understanding domain complexityQuerying for unconfined domains; SELinux users and roles; Listing SELinux user mappings; Mapping logins to SELinux users; Customizing logins towards services; Creating SELinux users; Listing accessible domains; Managing categories; Handling SELinux roles; Defining allowed SELinux contexts; Validating contexts with getseuser; Switching roles with newrole; Managing role access through sudo; Reaching other domains using runcon; Switching to the system role; SELinux and PAM; Assigning contexts through PAM; Prohibiting access during permissive mode. | |
| 505 | 8 | |a Polyinstantiating directoriesSummary; Chapter 4: Process Domains and File-Level Access Controls ; About SELinux file contexts; Getting context information; Interpreting SELinux context types; Keeping or ignoring contexts; Inheriting the default context; Querying transition rules; Copying and moving files; Temporarily changing file contexts; Placing categories on files and directories; Using multilevel security on files; Backing up and restoring extended attributes; Using mount options to set SELinux contexts; SELinux file context expressions; Using context expressions. | |
| 520 | 8 | |a Annotation |b Ward off traditional security permissions and effectively secure your Linux systems with SELinuxAbout This Book Leverage SELinux to improve the secure state of your Linux system A clear approach to adopting SELinux within your organization Essential skills and techniques to help further your system administration careerWho This Book Is ForThis book is for Linux administrators who want to control the secure state of their systems. It's packed with the latest information on SELinux operations and administrative procedures so you'll be able to further harden your system through mandatory access control (MAC) a security strategy that has been shaping Linux security for years. What You Will Learn Analyze SELinux events and selectively enable or disable SELinux enforcement Manage Linux users and associate them with the right role and permission set Secure network communications through SELinux access controls Tune the full service flexibility by dynamically assigning resource labels Handle SELinux access patterns enforced through the system Query the SELinux policy in depthIn DetailDo you have the crucial job of protecting your private and company systems from malicious attacks and undefined application behavior? Are you looking to secure your Linux systems with improved access controls? Look no further, intrepid administrator! This book will show you how to enhance your system's secure state across Linux distributions, helping you keep application vulnerabilities at bay. This book covers the core SELinux concepts and shows you how to leverage SELinux to improve the protection measures of a Linux system. You will learn the SELinux fundamentals and all of SELinux's configuration handles including conditional policies, constraints, policy types, and audit capabilities. These topics are paired with genuine examples of situations and issues you may come across as an administrator. In addition, you will learn how to further harden the virtualization offering of both libvirt (sVirt) and Docker through SELinux. By the end of the book you will know how SELinux works and how you can tune it to meet your needs. Style and approachThis book offers a complete overview of SELinux administration and how it integrates with other components on a Linux system. It covers the majority of SELinux features with a mix of real life scenarios, descriptions, and examples. This book contains everything an administrator needs to customize SELinux. | |
| 630 | 0 | 0 | |a Linux. |0 http://id.loc.gov/authorities/names/n94087892 |
| 630 | 0 | 7 | |a Linux |2 fast |
| 650 | 0 | |a Computer networks |x Security measures. |0 http://id.loc.gov/authorities/subjects/sh94001277 | |
| 650 | 6 | |a Réseaux d'ordinateurs |x Sécurité |x Mesures. | |
| 650 | 7 | |a COMPUTERS |x Security |x Networking. |2 bisacsh | |
| 650 | 7 | |a Computer networks |x Security measures |2 fast | |
| 776 | 0 | 8 | |i Print version: |a Vermeulen, Sven. |t SELinux system administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux. |b Second edition. |d Birmingham, England ; Mumbai, India : Packt Publishing, ©2016 |h 276 pages |z 9781787126954 |
| 856 | 4 | 0 | |l FWS01 |p ZDB-4-EBA |q FWS_PDA_EBA |u https://search.ebscohost.com/login.aspx?direct=true&scope=site&db=nlebk&AN=1441464 |3 Volltext |
| 938 | |a ProQuest Ebook Central |b EBLB |n EBL4771731 | ||
| 938 | |a EBSCOhost |b EBSC |n 1441464 | ||
| 938 | |a ProQuest MyiLibrary Digital eBook Collection |b IDEB |n cis36498397 | ||
| 938 | |a YBP Library Services |b YANK |n 13514686 | ||
| 994 | |a 92 |b GEBAY | ||
| 912 | |a ZDB-4-EBA | ||
| 049 | |a DE-863 | ||
Datensatz im Suchindex
| DE-BY-FWS_katkey | ZDB-4-EBA-ocn969172197 |
|---|---|
| _version_ | 1816882376146419712 |
| adam_text | |
| any_adam_object | |
| author | Vermeulen, Sven |
| author_facet | Vermeulen, Sven |
| author_role | aut |
| author_sort | Vermeulen, Sven |
| author_variant | s v sv |
| building | Verbundindex |
| bvnumber | localFWS |
| callnumber-first | Q - Science |
| callnumber-label | QA76 |
| callnumber-raw | QA76.774.L46 |
| callnumber-search | QA76.774.L46 |
| callnumber-sort | QA 276.774 L46 |
| callnumber-subject | QA - Mathematics |
| collection | ZDB-4-EBA |
| contents | Cover ; Credits; About the Author; About the Reviewers; www.PacktPub.com; Table of Contents; Preface; Chapter 1: Fundamental SELinux Concepts ; Providing more security to Linux; Using Linux security modules; Extending regular DAC with SELinux; Restricting root privileges; Reducing the impact of vulnerabilities; Enabling SELinux support; Labeling all resources and objects; Dissecting the SELinux context; Enforcing access through types; Granting domain access through roles; Limiting roles through users; Controlling information flow through sensitivities; Defining and distributing policies. Writing SELinux policiesDistributing policies through modules; Bundling modules in a policy store; Distinguishing between policies; Supporting MLS; Dealing with unknown permissions; Supporting unconfined domains; Limiting cross-user sharing; Incrementing policy versions; Different policy content; Summary; Chapter 2: Understanding SELinux Decisions and Logging ; Switching SELinux on and off; Setting the global SELinux state; Switching to permissive (or enforcing) mode; Using kernel boot parameters; Disabling SELinux protections for a single service; Understanding SELinux-aware applications. SELinux logging and auditingFollowing audit events; Uncovering more logging; Configuring Linux auditing; Configuring the local system logger; Reading SELinux denials; Other SELinux-related event types; USER_AVC; SELINUX_ERR; MAC_POLICY_LOAD; MAC_CONFIG_CHANGE; MAC_STATUS; NetLabel events; Labeled IPsec events; Using ausearch; Getting help with denials; Troubleshooting with setroubleshoot; Sending e-mails when SELinux denials occur; Using audit2why; Interacting with systemd-journal; Using common sense; Summary; Chapter 3: Managing User Logins ; User-oriented SELinux contexts. Understanding domain complexityQuerying for unconfined domains; SELinux users and roles; Listing SELinux user mappings; Mapping logins to SELinux users; Customizing logins towards services; Creating SELinux users; Listing accessible domains; Managing categories; Handling SELinux roles; Defining allowed SELinux contexts; Validating contexts with getseuser; Switching roles with newrole; Managing role access through sudo; Reaching other domains using runcon; Switching to the system role; SELinux and PAM; Assigning contexts through PAM; Prohibiting access during permissive mode. Polyinstantiating directoriesSummary; Chapter 4: Process Domains and File-Level Access Controls ; About SELinux file contexts; Getting context information; Interpreting SELinux context types; Keeping or ignoring contexts; Inheriting the default context; Querying transition rules; Copying and moving files; Temporarily changing file contexts; Placing categories on files and directories; Using multilevel security on files; Backing up and restoring extended attributes; Using mount options to set SELinux contexts; SELinux file context expressions; Using context expressions. |
| ctrlnum | (OCoLC)969172197 |
| dewey-full | 005.432 |
| dewey-hundreds | 000 - Computer science, information, general works |
| dewey-ones | 005 - Computer programming, programs, data, security |
| dewey-raw | 005.432 |
| dewey-search | 005.432 |
| dewey-sort | 15.432 |
| dewey-tens | 000 - Computer science, information, general works |
| discipline | Informatik |
| edition | Second edition. |
| format | Electronic eBook |
| fullrecord | <?xml version="1.0" encoding="UTF-8"?><collection xmlns="http://www.loc.gov/MARC21/slim"><record><leader>08128cam a2200589 i 4500</leader><controlfield tag="001">ZDB-4-EBA-ocn969172197</controlfield><controlfield tag="003">OCoLC</controlfield><controlfield tag="005">20241004212047.0</controlfield><controlfield tag="006">m o d </controlfield><controlfield tag="007">cr unu||||||||</controlfield><controlfield tag="008">170119s2016 enka o 000 0 eng d</controlfield><datafield tag="040" ind1=" " ind2=" "><subfield code="a">UMI</subfield><subfield code="b">eng</subfield><subfield code="e">rda</subfield><subfield code="e">pn</subfield><subfield code="c">UMI</subfield><subfield code="d">OCLCF</subfield><subfield code="d">IDEBK</subfield><subfield code="d">STF</subfield><subfield code="d">OCLCQ</subfield><subfield code="d">COO</subfield><subfield code="d">VT2</subfield><subfield code="d">N$T</subfield><subfield code="d">OCLCO</subfield><subfield code="d">EBLCP</subfield><subfield code="d">YDX</subfield><subfield code="d">MERUC</subfield><subfield code="d">REB</subfield><subfield code="d">CHVBK</subfield><subfield code="d">UOK</subfield><subfield code="d">CEF</subfield><subfield code="d">KSU</subfield><subfield code="d">DEBBG</subfield><subfield code="d">WYU</subfield><subfield code="d">OCLCQ</subfield><subfield code="d">OCLCO</subfield><subfield code="d">UAB</subfield><subfield code="d">OCLCQ</subfield><subfield code="d">OCLCO</subfield><subfield code="d">OCLCQ</subfield><subfield code="d">OCLCO</subfield><subfield code="d">OCLCQ</subfield></datafield><datafield tag="019" ind1=" " ind2=" "><subfield code="a">967095068</subfield><subfield code="a">972541212</subfield><subfield code="a">973807309</subfield><subfield code="a">973898082</subfield><subfield code="a">974359071</subfield><subfield code="a">974594929</subfield><subfield code="a">975077517</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">9781787127067</subfield><subfield code="q">(electronic bk.)</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">1787127060</subfield><subfield code="q">(electronic bk.)</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">1787126951</subfield><subfield code="q">(electronic bk.)</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">9781787126954</subfield><subfield code="q">(electronic bk.)</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="z">9781787126954</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(OCoLC)969172197</subfield><subfield code="z">(OCoLC)967095068</subfield><subfield code="z">(OCoLC)972541212</subfield><subfield code="z">(OCoLC)973807309</subfield><subfield code="z">(OCoLC)973898082</subfield><subfield code="z">(OCoLC)974359071</subfield><subfield code="z">(OCoLC)974594929</subfield><subfield code="z">(OCoLC)975077517</subfield></datafield><datafield tag="037" ind1=" " ind2=" "><subfield code="a">CL0500000819</subfield><subfield code="b">Safari Books Online</subfield></datafield><datafield tag="050" ind1=" " ind2="4"><subfield code="a">QA76.774.L46</subfield></datafield><datafield tag="072" ind1=" " ind2="7"><subfield code="a">COM</subfield><subfield code="x">043050</subfield><subfield code="2">bisacsh</subfield></datafield><datafield tag="082" ind1="7" ind2=" "><subfield code="a">005.432</subfield><subfield code="2">23</subfield></datafield><datafield tag="049" ind1=" " ind2=" "><subfield code="a">MAIN</subfield></datafield><datafield tag="100" ind1="1" ind2=" "><subfield code="a">Vermeulen, Sven,</subfield><subfield code="e">author.</subfield></datafield><datafield tag="245" ind1="1" ind2="0"><subfield code="a">SELinux System Administration :</subfield><subfield code="b">ward off traditional security permissions and effectively secure your Linuxs systems with SELinux /</subfield><subfield code="c">Sven Vermeulen.</subfield></datafield><datafield tag="250" ind1=" " ind2=" "><subfield code="a">Second edition.</subfield></datafield><datafield tag="264" ind1=" " ind2="1"><subfield code="a">Birmingham, UK :</subfield><subfield code="b">Packt Publishing,</subfield><subfield code="c">2016.</subfield></datafield><datafield tag="300" ind1=" " ind2=" "><subfield code="a">1 online resource (1 volume) :</subfield><subfield code="b">illustrations</subfield></datafield><datafield tag="336" ind1=" " ind2=" "><subfield code="a">text</subfield><subfield code="b">txt</subfield><subfield code="2">rdacontent</subfield></datafield><datafield tag="337" ind1=" " ind2=" "><subfield code="a">computer</subfield><subfield code="b">c</subfield><subfield code="2">rdamedia</subfield></datafield><datafield tag="338" ind1=" " ind2=" "><subfield code="a">online resource</subfield><subfield code="b">cr</subfield><subfield code="2">rdacarrier</subfield></datafield><datafield tag="588" ind1="0" ind2=" "><subfield code="a">Online resource; title from cover (viewed January 18, 2017).</subfield></datafield><datafield tag="505" ind1="0" ind2=" "><subfield code="a">Cover ; Credits; About the Author; About the Reviewers; www.PacktPub.com; Table of Contents; Preface; Chapter 1: Fundamental SELinux Concepts ; Providing more security to Linux; Using Linux security modules; Extending regular DAC with SELinux; Restricting root privileges; Reducing the impact of vulnerabilities; Enabling SELinux support; Labeling all resources and objects; Dissecting the SELinux context; Enforcing access through types; Granting domain access through roles; Limiting roles through users; Controlling information flow through sensitivities; Defining and distributing policies.</subfield></datafield><datafield tag="505" ind1="8" ind2=" "><subfield code="a">Writing SELinux policiesDistributing policies through modules; Bundling modules in a policy store; Distinguishing between policies; Supporting MLS; Dealing with unknown permissions; Supporting unconfined domains; Limiting cross-user sharing; Incrementing policy versions; Different policy content; Summary; Chapter 2: Understanding SELinux Decisions and Logging ; Switching SELinux on and off; Setting the global SELinux state; Switching to permissive (or enforcing) mode; Using kernel boot parameters; Disabling SELinux protections for a single service; Understanding SELinux-aware applications.</subfield></datafield><datafield tag="505" ind1="8" ind2=" "><subfield code="a">SELinux logging and auditingFollowing audit events; Uncovering more logging; Configuring Linux auditing; Configuring the local system logger; Reading SELinux denials; Other SELinux-related event types; USER_AVC; SELINUX_ERR; MAC_POLICY_LOAD; MAC_CONFIG_CHANGE; MAC_STATUS; NetLabel events; Labeled IPsec events; Using ausearch; Getting help with denials; Troubleshooting with setroubleshoot; Sending e-mails when SELinux denials occur; Using audit2why; Interacting with systemd-journal; Using common sense; Summary; Chapter 3: Managing User Logins ; User-oriented SELinux contexts.</subfield></datafield><datafield tag="505" ind1="8" ind2=" "><subfield code="a">Understanding domain complexityQuerying for unconfined domains; SELinux users and roles; Listing SELinux user mappings; Mapping logins to SELinux users; Customizing logins towards services; Creating SELinux users; Listing accessible domains; Managing categories; Handling SELinux roles; Defining allowed SELinux contexts; Validating contexts with getseuser; Switching roles with newrole; Managing role access through sudo; Reaching other domains using runcon; Switching to the system role; SELinux and PAM; Assigning contexts through PAM; Prohibiting access during permissive mode.</subfield></datafield><datafield tag="505" ind1="8" ind2=" "><subfield code="a">Polyinstantiating directoriesSummary; Chapter 4: Process Domains and File-Level Access Controls ; About SELinux file contexts; Getting context information; Interpreting SELinux context types; Keeping or ignoring contexts; Inheriting the default context; Querying transition rules; Copying and moving files; Temporarily changing file contexts; Placing categories on files and directories; Using multilevel security on files; Backing up and restoring extended attributes; Using mount options to set SELinux contexts; SELinux file context expressions; Using context expressions.</subfield></datafield><datafield tag="520" ind1="8" ind2=" "><subfield code="a">Annotation</subfield><subfield code="b">Ward off traditional security permissions and effectively secure your Linux systems with SELinuxAbout This Book Leverage SELinux to improve the secure state of your Linux system A clear approach to adopting SELinux within your organization Essential skills and techniques to help further your system administration careerWho This Book Is ForThis book is for Linux administrators who want to control the secure state of their systems. It's packed with the latest information on SELinux operations and administrative procedures so you'll be able to further harden your system through mandatory access control (MAC) a security strategy that has been shaping Linux security for years. What You Will Learn Analyze SELinux events and selectively enable or disable SELinux enforcement Manage Linux users and associate them with the right role and permission set Secure network communications through SELinux access controls Tune the full service flexibility by dynamically assigning resource labels Handle SELinux access patterns enforced through the system Query the SELinux policy in depthIn DetailDo you have the crucial job of protecting your private and company systems from malicious attacks and undefined application behavior? Are you looking to secure your Linux systems with improved access controls? Look no further, intrepid administrator! This book will show you how to enhance your system's secure state across Linux distributions, helping you keep application vulnerabilities at bay. This book covers the core SELinux concepts and shows you how to leverage SELinux to improve the protection measures of a Linux system. You will learn the SELinux fundamentals and all of SELinux's configuration handles including conditional policies, constraints, policy types, and audit capabilities. These topics are paired with genuine examples of situations and issues you may come across as an administrator. In addition, you will learn how to further harden the virtualization offering of both libvirt (sVirt) and Docker through SELinux. By the end of the book you will know how SELinux works and how you can tune it to meet your needs. Style and approachThis book offers a complete overview of SELinux administration and how it integrates with other components on a Linux system. It covers the majority of SELinux features with a mix of real life scenarios, descriptions, and examples. This book contains everything an administrator needs to customize SELinux.</subfield></datafield><datafield tag="630" ind1="0" ind2="0"><subfield code="a">Linux.</subfield><subfield code="0">http://id.loc.gov/authorities/names/n94087892</subfield></datafield><datafield tag="630" ind1="0" ind2="7"><subfield code="a">Linux</subfield><subfield code="2">fast</subfield></datafield><datafield tag="650" ind1=" " ind2="0"><subfield code="a">Computer networks</subfield><subfield code="x">Security measures.</subfield><subfield code="0">http://id.loc.gov/authorities/subjects/sh94001277</subfield></datafield><datafield tag="650" ind1=" " ind2="6"><subfield code="a">Réseaux d'ordinateurs</subfield><subfield code="x">Sécurité</subfield><subfield code="x">Mesures.</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">COMPUTERS</subfield><subfield code="x">Security</subfield><subfield code="x">Networking.</subfield><subfield code="2">bisacsh</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">Computer networks</subfield><subfield code="x">Security measures</subfield><subfield code="2">fast</subfield></datafield><datafield tag="776" ind1="0" ind2="8"><subfield code="i">Print version:</subfield><subfield code="a">Vermeulen, Sven.</subfield><subfield code="t">SELinux system administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux.</subfield><subfield code="b">Second edition.</subfield><subfield code="d">Birmingham, England ; Mumbai, India : Packt Publishing, ©2016</subfield><subfield code="h">276 pages</subfield><subfield code="z">9781787126954</subfield></datafield><datafield tag="856" ind1="4" ind2="0"><subfield code="l">FWS01</subfield><subfield code="p">ZDB-4-EBA</subfield><subfield code="q">FWS_PDA_EBA</subfield><subfield code="u">https://search.ebscohost.com/login.aspx?direct=true&scope=site&db=nlebk&AN=1441464</subfield><subfield code="3">Volltext</subfield></datafield><datafield tag="938" ind1=" " ind2=" "><subfield code="a">ProQuest Ebook Central</subfield><subfield code="b">EBLB</subfield><subfield code="n">EBL4771731</subfield></datafield><datafield tag="938" ind1=" " ind2=" "><subfield code="a">EBSCOhost</subfield><subfield code="b">EBSC</subfield><subfield code="n">1441464</subfield></datafield><datafield tag="938" ind1=" " ind2=" "><subfield code="a">ProQuest MyiLibrary Digital eBook Collection</subfield><subfield code="b">IDEB</subfield><subfield code="n">cis36498397</subfield></datafield><datafield tag="938" ind1=" " ind2=" "><subfield code="a">YBP Library Services</subfield><subfield code="b">YANK</subfield><subfield code="n">13514686</subfield></datafield><datafield tag="994" ind1=" " ind2=" "><subfield code="a">92</subfield><subfield code="b">GEBAY</subfield></datafield><datafield tag="912" ind1=" " ind2=" "><subfield code="a">ZDB-4-EBA</subfield></datafield><datafield tag="049" ind1=" " ind2=" "><subfield code="a">DE-863</subfield></datafield></record></collection> |
| id | ZDB-4-EBA-ocn969172197 |
| illustrated | Illustrated |
| indexdate | 2024-11-27T13:27:37Z |
| institution | BVB |
| isbn | 9781787127067 1787127060 1787126951 9781787126954 |
| language | English |
| oclc_num | 969172197 |
| open_access_boolean | |
| owner | MAIN DE-863 DE-BY-FWS |
| owner_facet | MAIN DE-863 DE-BY-FWS |
| physical | 1 online resource (1 volume) : illustrations |
| psigel | ZDB-4-EBA |
| publishDate | 2016 |
| publishDateSearch | 2016 |
| publishDateSort | 2016 |
| publisher | Packt Publishing, |
| record_format | marc |
| spelling | Vermeulen, Sven, author. SELinux System Administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux / Sven Vermeulen. Second edition. Birmingham, UK : Packt Publishing, 2016. 1 online resource (1 volume) : illustrations text txt rdacontent computer c rdamedia online resource cr rdacarrier Online resource; title from cover (viewed January 18, 2017). Cover ; Credits; About the Author; About the Reviewers; www.PacktPub.com; Table of Contents; Preface; Chapter 1: Fundamental SELinux Concepts ; Providing more security to Linux; Using Linux security modules; Extending regular DAC with SELinux; Restricting root privileges; Reducing the impact of vulnerabilities; Enabling SELinux support; Labeling all resources and objects; Dissecting the SELinux context; Enforcing access through types; Granting domain access through roles; Limiting roles through users; Controlling information flow through sensitivities; Defining and distributing policies. Writing SELinux policiesDistributing policies through modules; Bundling modules in a policy store; Distinguishing between policies; Supporting MLS; Dealing with unknown permissions; Supporting unconfined domains; Limiting cross-user sharing; Incrementing policy versions; Different policy content; Summary; Chapter 2: Understanding SELinux Decisions and Logging ; Switching SELinux on and off; Setting the global SELinux state; Switching to permissive (or enforcing) mode; Using kernel boot parameters; Disabling SELinux protections for a single service; Understanding SELinux-aware applications. SELinux logging and auditingFollowing audit events; Uncovering more logging; Configuring Linux auditing; Configuring the local system logger; Reading SELinux denials; Other SELinux-related event types; USER_AVC; SELINUX_ERR; MAC_POLICY_LOAD; MAC_CONFIG_CHANGE; MAC_STATUS; NetLabel events; Labeled IPsec events; Using ausearch; Getting help with denials; Troubleshooting with setroubleshoot; Sending e-mails when SELinux denials occur; Using audit2why; Interacting with systemd-journal; Using common sense; Summary; Chapter 3: Managing User Logins ; User-oriented SELinux contexts. Understanding domain complexityQuerying for unconfined domains; SELinux users and roles; Listing SELinux user mappings; Mapping logins to SELinux users; Customizing logins towards services; Creating SELinux users; Listing accessible domains; Managing categories; Handling SELinux roles; Defining allowed SELinux contexts; Validating contexts with getseuser; Switching roles with newrole; Managing role access through sudo; Reaching other domains using runcon; Switching to the system role; SELinux and PAM; Assigning contexts through PAM; Prohibiting access during permissive mode. Polyinstantiating directoriesSummary; Chapter 4: Process Domains and File-Level Access Controls ; About SELinux file contexts; Getting context information; Interpreting SELinux context types; Keeping or ignoring contexts; Inheriting the default context; Querying transition rules; Copying and moving files; Temporarily changing file contexts; Placing categories on files and directories; Using multilevel security on files; Backing up and restoring extended attributes; Using mount options to set SELinux contexts; SELinux file context expressions; Using context expressions. Annotation Ward off traditional security permissions and effectively secure your Linux systems with SELinuxAbout This Book Leverage SELinux to improve the secure state of your Linux system A clear approach to adopting SELinux within your organization Essential skills and techniques to help further your system administration careerWho This Book Is ForThis book is for Linux administrators who want to control the secure state of their systems. It's packed with the latest information on SELinux operations and administrative procedures so you'll be able to further harden your system through mandatory access control (MAC) a security strategy that has been shaping Linux security for years. What You Will Learn Analyze SELinux events and selectively enable or disable SELinux enforcement Manage Linux users and associate them with the right role and permission set Secure network communications through SELinux access controls Tune the full service flexibility by dynamically assigning resource labels Handle SELinux access patterns enforced through the system Query the SELinux policy in depthIn DetailDo you have the crucial job of protecting your private and company systems from malicious attacks and undefined application behavior? Are you looking to secure your Linux systems with improved access controls? Look no further, intrepid administrator! This book will show you how to enhance your system's secure state across Linux distributions, helping you keep application vulnerabilities at bay. This book covers the core SELinux concepts and shows you how to leverage SELinux to improve the protection measures of a Linux system. You will learn the SELinux fundamentals and all of SELinux's configuration handles including conditional policies, constraints, policy types, and audit capabilities. These topics are paired with genuine examples of situations and issues you may come across as an administrator. In addition, you will learn how to further harden the virtualization offering of both libvirt (sVirt) and Docker through SELinux. By the end of the book you will know how SELinux works and how you can tune it to meet your needs. Style and approachThis book offers a complete overview of SELinux administration and how it integrates with other components on a Linux system. It covers the majority of SELinux features with a mix of real life scenarios, descriptions, and examples. This book contains everything an administrator needs to customize SELinux. Linux. http://id.loc.gov/authorities/names/n94087892 Linux fast Computer networks Security measures. http://id.loc.gov/authorities/subjects/sh94001277 Réseaux d'ordinateurs Sécurité Mesures. COMPUTERS Security Networking. bisacsh Computer networks Security measures fast Print version: Vermeulen, Sven. SELinux system administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux. Second edition. Birmingham, England ; Mumbai, India : Packt Publishing, ©2016 276 pages 9781787126954 FWS01 ZDB-4-EBA FWS_PDA_EBA https://search.ebscohost.com/login.aspx?direct=true&scope=site&db=nlebk&AN=1441464 Volltext |
| spellingShingle | Vermeulen, Sven SELinux System Administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux / Cover ; Credits; About the Author; About the Reviewers; www.PacktPub.com; Table of Contents; Preface; Chapter 1: Fundamental SELinux Concepts ; Providing more security to Linux; Using Linux security modules; Extending regular DAC with SELinux; Restricting root privileges; Reducing the impact of vulnerabilities; Enabling SELinux support; Labeling all resources and objects; Dissecting the SELinux context; Enforcing access through types; Granting domain access through roles; Limiting roles through users; Controlling information flow through sensitivities; Defining and distributing policies. Writing SELinux policiesDistributing policies through modules; Bundling modules in a policy store; Distinguishing between policies; Supporting MLS; Dealing with unknown permissions; Supporting unconfined domains; Limiting cross-user sharing; Incrementing policy versions; Different policy content; Summary; Chapter 2: Understanding SELinux Decisions and Logging ; Switching SELinux on and off; Setting the global SELinux state; Switching to permissive (or enforcing) mode; Using kernel boot parameters; Disabling SELinux protections for a single service; Understanding SELinux-aware applications. SELinux logging and auditingFollowing audit events; Uncovering more logging; Configuring Linux auditing; Configuring the local system logger; Reading SELinux denials; Other SELinux-related event types; USER_AVC; SELINUX_ERR; MAC_POLICY_LOAD; MAC_CONFIG_CHANGE; MAC_STATUS; NetLabel events; Labeled IPsec events; Using ausearch; Getting help with denials; Troubleshooting with setroubleshoot; Sending e-mails when SELinux denials occur; Using audit2why; Interacting with systemd-journal; Using common sense; Summary; Chapter 3: Managing User Logins ; User-oriented SELinux contexts. Understanding domain complexityQuerying for unconfined domains; SELinux users and roles; Listing SELinux user mappings; Mapping logins to SELinux users; Customizing logins towards services; Creating SELinux users; Listing accessible domains; Managing categories; Handling SELinux roles; Defining allowed SELinux contexts; Validating contexts with getseuser; Switching roles with newrole; Managing role access through sudo; Reaching other domains using runcon; Switching to the system role; SELinux and PAM; Assigning contexts through PAM; Prohibiting access during permissive mode. Polyinstantiating directoriesSummary; Chapter 4: Process Domains and File-Level Access Controls ; About SELinux file contexts; Getting context information; Interpreting SELinux context types; Keeping or ignoring contexts; Inheriting the default context; Querying transition rules; Copying and moving files; Temporarily changing file contexts; Placing categories on files and directories; Using multilevel security on files; Backing up and restoring extended attributes; Using mount options to set SELinux contexts; SELinux file context expressions; Using context expressions. Linux. http://id.loc.gov/authorities/names/n94087892 Linux fast Computer networks Security measures. http://id.loc.gov/authorities/subjects/sh94001277 Réseaux d'ordinateurs Sécurité Mesures. COMPUTERS Security Networking. bisacsh Computer networks Security measures fast |
| subject_GND | http://id.loc.gov/authorities/names/n94087892 http://id.loc.gov/authorities/subjects/sh94001277 |
| title | SELinux System Administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux / |
| title_auth | SELinux System Administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux / |
| title_exact_search | SELinux System Administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux / |
| title_full | SELinux System Administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux / Sven Vermeulen. |
| title_fullStr | SELinux System Administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux / Sven Vermeulen. |
| title_full_unstemmed | SELinux System Administration : ward off traditional security permissions and effectively secure your Linuxs systems with SELinux / Sven Vermeulen. |
| title_short | SELinux System Administration : |
| title_sort | selinux system administration ward off traditional security permissions and effectively secure your linuxs systems with selinux |
| title_sub | ward off traditional security permissions and effectively secure your Linuxs systems with SELinux / |
| topic | Linux. http://id.loc.gov/authorities/names/n94087892 Linux fast Computer networks Security measures. http://id.loc.gov/authorities/subjects/sh94001277 Réseaux d'ordinateurs Sécurité Mesures. COMPUTERS Security Networking. bisacsh Computer networks Security measures fast |
| topic_facet | Linux. Linux Computer networks Security measures. Réseaux d'ordinateurs Sécurité Mesures. COMPUTERS Security Networking. Computer networks Security measures |
| url | https://search.ebscohost.com/login.aspx?direct=true&scope=site&db=nlebk&AN=1441464 |
| work_keys_str_mv | AT vermeulensven selinuxsystemadministrationwardofftraditionalsecuritypermissionsandeffectivelysecureyourlinuxssystemswithselinux |