SELinux by Example: Using Security Enhanced Linux David Caplan, Frank Mayer, Karl MacMillan
Publisher: Prentice Hall

Backup and recovery of clients running Security-Enhanced Linux (SELinux). As we know Linux itself is based on discretionary access control, now with SElinux there is a mandatory access control layer within the kernel that along with DAC can provide rock solid security, I am going to be demonstrating the power of SElinux but first some theory on how it works. SELinux security model Installation instructions for numerous distributions Basic system and user administration A detailed dissection of the SELinux policy language Examples and guidelines for altering and adding policies With SELinux, a high-security computer is within reach of any system administrator. You can check if you have these processes running by executing the ps command with the -Z qualifier. We are now using this tool to generate hundreds of man pages to document SELinux policy on every process domain. The httpd processes execute with the httpd_t SELinux type. Each confined domains will have an Security-Enhanced Linux secures the httpd processes via flexible mandatory access control. Karl MacMillan announces the release of a new SELinux book: SELinux By Example: Using Security Enhanced Linux, which he co-authored along with Frank Meyer and David Caplan of Tresys. Security-Enhanced Linux (SELinux) is on this example I will be creating a simple samba share that should be able to access from any client within my network. Now SELinux (Security Enhanced Linux) dramatically changes this. Using the example of the most popular open source backup and recovery software, Amanda, we will review best practices for ensuring security of backup data. Selinux: NSA's Open Source Security Enhanced Linux by Bill McCarty pdf download free.