On Tue, Nov 16, 2021 at 5:53 AM Topi Miettinen <toiwoton@xxxxxxxxx> wrote: > > Describe some easy and more difficult methods to harden SELinux > policies. > > Signed-off-by: Topi Miettinen <toiwoton@xxxxxxxxx> > > --- > v3: > - Updated with comments from Daniel Burgener and Dominick Grift > > v2: https://lore.kernel.org/selinux/20211113095547.19406-1-toiwoton@xxxxxxxxx/ > - Updated with comments from Daniel Burgener > - Fixed issues with PDF generation > > v1: https://lore.kernel.org/selinux/20211112125605.28915-1-toiwoton@xxxxxxxxx/ > --- > src/hardening.md | 205 +++++++++++++++++++++++++++++++ > src/implementing_seaware_apps.md | 2 +- > src/reference_policy.md | 2 +- > src/section_list.txt | 1 + > src/toc.md | 1 + > 5 files changed, 209 insertions(+), 2 deletions(-) > create mode 100644 src/hardening.md Thanks Topi! Daniel and Dominick, what do you think of this latest version? Would one, or both of you like to tag it with a Reviewed-by? -- paul moore www.paul-moore.com