Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 1 down vote favorite

SELinux is still shipping with new version of Linux (like RHEL), and is still heavily used. However, if a problem occur its hard to find a forum post or answer that doesn’t just tell you to turn it off.

Creating your own SELinux policies is not that hard using tools like audit2allow or similar, but finding some good documentation is hard.

http://fedoraproject.org/wiki/SELinux/PolicyGenTools have some links to old projects, but it looks like most of them died in 2006.

As long as you understand the basic of SELinux policy making, there is really no problem creating them in a basic editor, but where is the documentation?

What I really miss is a list of policy macro list, a simple table with macro name, supported attributes and a short description. Have anyone found anything like that? The macros I find and uses now are from examples, but there is really no good way for me to know what they do.

share|improve this question
Unfortunately, StackExchange wasn't really designed with the idea of asking questions that result in lists, polls, etc. What we aim for are specific technical questions that can be conclusively answered. I think SELinux questions, and answers, would be fantastic, but I think this one is too open-ended. Depending on the perspective you want, also check out IT Security. – Scott Pack Nov 8 '12 at 21:03

closed as not a real question by growse, Tom O'Connor, mdpc, Brent Pabst, Scott Pack Nov 8 '12 at 21:03

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, see the FAQ.

Browse other questions tagged or ask your own question.