I want to secure RedHat 5.4 application server by SELinux (targeted policy) and have several questions

1, where can i get SELinux sources (/etc/selinux//src/policy/)There seems to be no such package on install cd ..

2, how to restrict user rights (for example user jboss could not modify /etc/my.cnf)

3, how to configure JBoss application server to work under SELinux

Although i read many documents from NSA the whole topic is still not clear for me.What i want is to basically protect filesystem in case one account is broken.I cannot find any materials about securing jboss server using either chroot jail, ACLs or SELinux ....

2 Answers 2


To answer #1

You could try taking a look at Dan Walsh's Fedora SELinux git repository.


Also, this page has some info about running JBoss with SELinux


Although it might be outdated and I'm not sure if you looked at it yet.

The SELinux Wiki is a great source for beginning policy development.


Good answer from Bostonvaulter. You can add one more line of defense by using a java security policy: http://docs.jboss.org/jbossas/docs/Server_Configuration_Guide/4/html/Security_on_JBoss-Running_JBoss_with_a_Java_2_security_manager.html

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .