SELinux (Security-Enhanced Linux) is an implementation of a flexible mandatory, role-based access control architecture on Linux. It is primarily used to confine system processes.
6
votes
1answer
92 views
SELinux and text relocations exploitability
I have been assigned the task of adopting and implementing a certain backup software solution for our GNU/Linux farm.
As per my deparment defined requirements, this solution should support SELinux ...
1
vote
3answers
208 views
Restrict access to a specific directory on Linux
I want to limit access to a single directory on the hard disk (log files) to few processes (log files for a single process for example). All processes run under the same user, so file system access ...
6
votes
2answers
334 views
Comparsion Between AppArmor and Selinux
I was reviewing several different comparison of AppArmor and Selinux which include
Why I Like AppArmor More Than SELinux
SELinux and AppArmor: An Introductory Comparison
From these articles I ...
2
votes
2answers
110 views
Is it possible to boot into root's /bin/bash on a LUKS encrypted device?
I have to check the possibility of case mentioned in the title. An average Linux could be booted up into root's terminal directly without authentication by modifying kernel boot parameters.
I'd like ...
2
votes
2answers
425 views
Restrict network access for a single process with SELinux or AppArmor
I have a Python script that access the network, and I want to deny it network access sometimes. How can I achieve this with SELinux or AppArmor? I want to be able to launch this specific script with ...
3
votes
1answer
240 views
Filtering network access on a user/group/process basis
I am interested in peoples thoughts on what the best approach would be to controlling access to network interfaces at a user/group/process level for a Linux based host. The scenario I have in mind is ...
2
votes
2answers
2k views
Is there an easy way to see a log of SCP activity on a server (ala /var/log/secure for ssh login)?
On Linux systems, /var/log/secure (or similar, depending on distro) shows all SSH login activity. Is there a similar log for SCP? If not, what's a good approach to enabling logging of scp activity ...
2
votes
1answer
354 views
What are the practical differences between SELinux targeted mode and a capability based OS?
I recently asked a question about the differences between capabilities and mandatory access controls.
Among the answers I got the point was made that systems like SE Linux in targeted mode are not a ...
11
votes
2answers
323 views
Network policies under AppArmor/SELinux
I am attempting to sandbox some untrusted processes using Linux's MAC frameworks -- either SELinux or AppArmor.
I see that both SELinux and AppArmor allow the selected granting of socket level access ...
