Re: What is Type Enforcement Model in SELinux?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, Mar 1, 2014 at 8:26 AM, Kernel freak <kernelfreak@xxxxxxxxx> wrote:
>
>
>
> On Sat, Mar 1, 2014 at 2:14 PM, Bryan Harris <bryanlharris@xxxxxx> wrote:
>>
>> I am also new to selinux but I believe what you're looking for is MAC
>> mandatory access control.
>>
>> http://en.m.wikipedia.org/wiki/SELinux
>>
>> Hope this helps and doesn't make things worse for you. (-:
>
>
> Sorry, but I don't believe it is.
>>
>>
>> Bryan
>>
>> > On Mar 1, 2014, at 6:23 AM, Kernel freak <kernelfreak@xxxxxxxxx> wrote:
>> >
>> > Hello Friends,
>> >                      I am writing a report and I need to write about TE
>> > model in SELinux. I searched around the net, but all the articles I read
>> > beat around the bush and never say like ok, this is TE model for SELinux.
>> > Can anyone be so kind and please point me out to some links which say
>> > about TE model in SELinux and if possible an appropriate model. Thank you
>> > for your time and patience.

SELinux doesn't just implement TE. It can implement RBAC, UBAC, TE,
and can also do MLS. To understand the threat SELinux and TE are
trying to mitigate read
http://www.nsa.gov/research/_files/publications/inevitability.pdf and
then you can read
https://lwn.net/2001/features/OLS/pdf/pdf/selinux.pdf to see how the
design of SELinux is meant to deal with those threats.


>> > _______________________________________________
>> > Selinux mailing list
>> > Selinux@xxxxxxxxxxxxx
>> > To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
>> > To get help, send an email containing "help" to
>> > Selinux-request@xxxxxxxxxxxxx.
>>
>> _______________________________________________
>> Selinux mailing list
>> Selinux@xxxxxxxxxxxxx
>> To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
>> To get help, send an email containing "help" to
>> Selinux-request@xxxxxxxxxxxxx.
>
>
>
> _______________________________________________
> Selinux mailing list
> Selinux@xxxxxxxxxxxxx
> To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
> To get help, send an email containing "help" to
> Selinux-request@xxxxxxxxxxxxx.
>
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.




[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux