The safety of SELinux

1.Introduction to Selinux rules

Selinux has many rules, and a simple rule has the following basic syntax:

Rule name Source type target type : Object category permission ; Rule name :allow,dontaudit,auditallow and neverallow Source Type : The type of access granted, usually the domain type of the process Target Type : The type of the object, the type that it is authorized to access Object Category : Category of Object License : Represents the type of operation (also known as an access vector) that is allowed by the principal for object access.

This article is from the "Operation and maintenance Automation" blog, please make sure to keep this source http://shower.blog.51cto.com/4926872/1969513

The safety of SELinux