I want to secure RedHat 5.4 application server by SELinux (targeted policy) and have several questions
1, where can i get SELinux sources (/etc/selinux//src/policy/)There seems to be no such package on install cd ..
2, how to restrict user rights (for example user jboss could not modify /etc/my.cnf)
3, how to configure JBoss application server to work under SELinux
Although i read many documents from NSA the whole topic is still not clear for me.What i want is to basically protect filesystem in case one account is broken.I cannot find any materials about securing jboss server using either chroot jail, ACLs or SELinux ....