Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I want to secure RedHat 5.4 application server by SELinux (targeted policy) and have several questions

1, where can i get SELinux sources (/etc/selinux//src/policy/)There seems to be no such package on install cd ..

2, how to restrict user rights (for example user jboss could not modify /etc/my.cnf)

3, how to configure JBoss application server to work under SELinux

Although i read many documents from NSA the whole topic is still not clear for me.What i want is to basically protect filesystem in case one account is broken.I cannot find any materials about securing jboss server using either chroot jail, ACLs or SELinux ....

share|improve this question
add comment

2 Answers

Good answer from Bostonvaulter. You can add one more line of defense by using a java security policy: http://docs.jboss.org/jbossas/docs/Server_Configuration_Guide/4/html/Security_on_JBoss-Running_JBoss_with_a_Java_2_security_manager.html

share|improve this answer
add comment

To answer #1

You could try taking a look at Dan Walsh's Fedora SELinux git repository.

http://danwalsh.livejournal.com/38032.html

Also, this page has some info about running JBoss with SELinux

http://community.jboss.org/wiki/startjbossonbootwithlinux

Although it might be outdated and I'm not sure if you looked at it yet.

The SELinux Wiki is a great source for beginning policy development.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.