Selinux: NSAs Open Source Security Enhanced Linux

     

The procedure for installing SELinux varies according to the target Linux distribution. However, it generally includes the following operations:

  • Configuration, compilation, and installation of a kernel supporting SELinux

  • Modification of the bootloader configuration to include the new, SELinux-capable kernel

  • Installation and configuration of SELinux- related userland libraries, utilities, and commands

  • Compilation and installation of an SELinux policy

  • Labeling of the filesystems

The operations can be performed in any of a variety of sequences. A few of these operations can be entirely omitted if precompiled packages are used. And additional operations are generally required, as explained in the following sections.

Категории