SELinux System Administration
A comprehensive guide to walk you through SELinux
access controls
Sven Vermeulen
BIRMINGHAM - MUMBAI
SELinux System Administration
Copyright © 2013 Packt Publishing
All rights reserved. No part of this book may be reproduced, stored in a retrieval
system, or transmitted in any form or by any means, without the prior written
permission of the publisher, except in the case of brief quotations embedded in
critical articles or reviews.
Every effort has been made in the preparation of this book to ensure the accuracy
of the information presented. However, the information contained in this book is
sold without warranty, either express or implied. Neither the author, nor Packt
Publishing, and its dealers and distributors will be held liable for any damages
caused or alleged to be caused directly or indirectly by this book.
Packt Publishing has endeavored to provide trademark information about all of the
companies and products mentioned in this book by the appropriate use of capitals.
However, Packt Publishing cannot guarantee the accuracy of this information.
First published: September 2013
Production Reference: 1170913
Published by Packt Publishing Ltd.
Livery Place
35 Livery Street
Birmingham B3 2PB, UK.
ISBN 978-1-78328-317-0
www.packtpub.com
Cover Image by Jarek Blaminsky (milak6@wp.pl)
Credits
Author
Sven Vermeulen
Reviewers
Thomas Fischer
Dominick Grift
Acquisition Editor
Kartikey Pandey
Commissioning Editor
Neha Nagwekar
Technical Editor
Krishnaveni Haridas
Project Coordinator
Suraj Bist
Proofreaders
Ameesha Green
Maria Gould
Simran Bhogal
Indexer
Priya Subramani
Graphics
Abhinash Sahu
Production Coordinator
Nitesh Thakur
Cover Work
Nitesh Thakur
About the Author
Sven Vermeulen is a long term contributor to various free software projects
and the author of various online guides and resources. He got his rst taste of free
software in 1997 and never looked back since then. In 2003, he joined the ranks of the
Gentoo Linux project as a documentation developer and has crossed several roles
after that, including Gentoo Foundation’s trustee, council member, project leads for
documentation, and (his current role) project lead for Gentoo Hardened’s SELinux
integration.
In this time frame, he has gained expertise in several technologies, ranging from
operating system level knowledge to application servers as he used his interest
in security to guide his projects further: security guides using SCAP languages,
mandatory access controls through SELinux, authentication with PAM, (application)
rewalling, and more.
On SELinux, he has contributed several policies to the reference policy project and
participates actively in policy development and user space development projects.
Sven is an IT infrastructure architect working at a European nancial institution.
Secured implementation of infrastructure (and the surrounding architectural
integration) is of course an important part of this. Prior to this, he graduated with an
MSc in Computer Engineering at the University of Ghent and then worked as a web
application infrastructure engineer with IBM WebSphere AS.
