selinuxproject / selinux-notebook Goto Github PK

On CentOS 8.4 systems encountering a mount point security context for a tmpfs file becomes system_u:object_r:adjtime_t:s0, this issue is epidoxical. What is the usual cause of this problem?

I want to write a library to read such rules.
You can provide a detailed example of rules (te if fc) with all sorts of syntax:

optional_policy(`
    dbus_system_bus_client(kde_t)
    dbus_connect_system_bus(kde_t)
')
optional_policy(`
    gen_require(`
        type user_t;
        role user_r;
    ')
    kde_run(user_t, user_r)
')

with monolithic syntax:

require {
         type discord_t;
         class lnk_file read;
}

With deprecated macros.

With obsolete keywords

dominance { role message_filter_r { role unconfined_r };}

Complete example for MLS MCS

And other things

We should search through the text and replace "whitelist" with "allowlist" and "blacklist" with "denylist" before the next release.

1. Download https://github.com/SELinuxProject/selinux-notebook/releases/download/20221216/SELinux_Notebook.pdf
2. Look for CIL Reference Guide

Same for epub:

<li><a href="file:///home/pcmoore/sources/selinux-notebook/src/notebook-examples/selinux-policy/cil/CIL_Reference_Guide.pdf">CIL Reference Guide</a></li>

fs_use_task pipefs system_u:object_r:fs_t:s0
The type component defaults to the type of the target type if no matching type_transition rule was specified
in the policy (policy version 28 allows a default_type of source or target to be defined)

What exactly does the target type described here mean? The above policy as an example, is it fs_t?

could you please add 'Discussions' page for forum on both book and selinux projects?

On the PDF generated content page 113 it references a link to https://sepgsql.googlecode.com/files/LCA20090120-lapp-selinux.pdf

Through a quick search I found a github repo that appears to have this file although I'm not familiar with whether this should be the correct reference @ https://raw.githubusercontent.com/kaigai/slides/master/20090120_LCA2009_LAPP_SELINUX.pdf

A patch of the URL substitution is below:

diff --git a/src/apache_support.md b/src/apache_support.md
index 48c8293..f53a512 100644
--- a/src/apache_support.md
+++ b/src/apache_support.md
@@ -41,7 +41,7 @@ stack has the following support:
 and Python do have support for libselinux functions in packages: PHP - with
 the *php-pecl-selinux* package, Python - with the *libselinux-python* package.

-The "[A secure web application platform powered by SELinux](http://sepgsql.googlecode.com/files/LCA20090120-lapp-selinux.pdf)"
+The "[A secure web application platform powered by SELinux](https://raw.githubusercontent.com/kaigai/slides/master/20090120_LCA2009_LAPP_SELINUX.pdf)"
 document gives a good overview of the LAPP architecture.

 ## *mod_selinux* Overview

Since 20221216 there have been a few commits, maybe it would be interesting to have a new release