selinux

Some time ago, the Samba server was installed on the 4*4-core server in the lab. After solving the hardware problems installed on the server, Samba was configured on the server, but when the client accessed samba, display error. The red exclamation point is displayed in the upper-right corner of the host machine. Click here to see The SELinux alarm. The alarm time is the same as the samba access time of each client. It is estimated that

Getting started with SELinux Back in the era of Kernel 2.6, a new security system was introduced to provide access control security policies. This system is Security Enhanced Linux (SELinux), contributed by the US National Security Agency (NSA). It introduces a robust Mandatory Access Control (Mandatory Access Control) for the Linux kernel subsystem) architecture. If you disabled or ignored

When you execute certain programs in a Linux environment, you occasionally encounter a situation in which the SELinux enforcement mode is not enforceable, in which case you need to close selinux or change the enforcing to permissive mode before executing.SELinux is a mandatory access control (MAC) system available in the Linux kernelThe following is a description of several

SELinux (security-enhanced Linux) is a security subsystem of the U.S. National Security Agency (mac,mandatory access Control), developed with the help of the Linux open source community. The purpose of the Linux system to use SELinux technology is to constrain the individual service processes so that they are only able to obtain the resources that should be obtained.For example, you have installed a beautif

A: Security context principleThe security context is a simple, consistent access control attribute, in SELinux, where the type identifier is the primary component of the security context, and for historical reasons, the type of a process is often referred to as a domain, "domain" and "domain type" meaning the same, that is, both in the security context. TYPE ".key differences between 1:dac and Mac (root user)Security-Enhanced Linux (

This really is the network good many articles, I also many are everywhere reprint summary, then is oneself again to add and modified some. http://blog.csdn.net/myarrow/article/details/10105961, this is very detailed. KKGoogle has enabled SELinux by default and will print SELinux audit exceptions in kernel log or Android log (L), the corresponding keyword is: "avc:denied" or "avc:denied" KK version, Goog Le

First, some conceptsSecond, SELinux statusIii. related applicationsIv. Related OrdersFirst, some concepts1. Linux Secure access modelDAC (discretionary access control): Autonomous access controls2. SELinux Secure access mechanismSELinux is a secure system based on the Second, SELinux status1. SELinux Status(1), Disable

Posted in: Linux, Security | Author: blog leaderAlmost certainly everyone has heard of SELinux (more accurately, tried to shut down), and even some past experience has made you biased against SELinux. But with the growing 0-day security hole, perhaps it's time to learn about the 8-year-old mandatory access control system (MAC) in the Linux kernel.SELinux and mandatory access control systemThe

SELinux causes disk I/O problems-Linux Enterprise applications-Linux server application information. The following is a detailed description. Yesterday, the new server in the Changchun data center crashed at night. After restarting in the morning, check that % util occupied 100% of the system disk. why can't I get down? I stopped all the applications, but I still don't know if it was SELinux.

In 2000, researchers at William Mary College in the United States, Serge, and others at the Usenix 4th annual Linux Showcase conference Conference, published the title "Domainand Type Enforcement for Linux "article. The first time this article used the DTE model for Linux, the DTE Linux prototype system was implemented.The same year, the NSA's Stephen Smalley and others released the open source Linux security framework Selinux,

Four common causes of SELinux warning this article describes four causes of SELinux warning and solutions. Www.2cto.com cause 1: The core concept of SELinux is labeling, whether it is a file system, directory, File, file startup descriptor... four common causes of SELinux warning this article describes four causes of

Turn off SELinux functionality1. Permanently closed1.1 Check, BackupPermanently close SELinux1. Pre-operation BackupCat/etc/selinux/config# This file controls the state of the SELinux on the system.# selinux= can take one of these three values:# Enforcing-selinux security po

SELinux(Security enhanced Linux)system resources are through the process to read the changes, in order to ensure the security of the system resources, traditional Linux use the concept of user, file permissions to restrict access to resources, by comparing the process of initiating users and file permissions to ensure the security of system resources, which is a free access control mode (DAC), but as system resource security requirements increase, th

SELinux is short for security-enhanced Linux. The traditional Linux permission controls the owner, group, and other rwx of files and directories, while SELinux uses the delegated access control, that is to say, to control the access of a process to the files and directories on a specific file system, SELinux sets many rules to determine which processes can access

Analysis of selinux and Xinxing linuxselinux in Linux Selinux is a program initiated by the US National Security Agency. It aims to reinforce the system to a level that can reach the military level. This also provides more powerful protection for Linux security. The so-called DAC is autonomous access control, that is, in order to be able to share files with other users, each user can only change the permiss

To disable SELinux, modify selinux = quot; in the/etc/SELINUX/config file as disabled, and restart. If you do not want to restart the system, run the setenforce0 command. note: setenforce1 sets SELinux to enforcing mode. setenforce0 sets SELinux to permis. To disable

Four common causes of SELinux warning this article describes four causes of SELinux warning and solutions. Www.2cto.com cause 1: the core concept of SELinux is labeling, whether it is a file system, directory, file, file start descriptor, port, message interface or network interface, all tags are required and can only be executed according to the permissions gran

6.0.2.21 or later and IBM software development kit (SDK) version 1.4.2 Service Release 8 or later installed. If you want to use WebSphere Application Server Version 6.1 on the Red Hat Enterprise Linux version 5 Operating System, you must have WebSphere Application Server version 6.1.0.9 or later and ibm sdk version 1.5 Service Release 5 or later installed. In addition, the Red Hat Enterprise Linux version 5 default policy for security-enhanced Linux (SELinu