how to install and use selinux!

English Open Chat
1

I want to use selinux in the OpenSUSE11.1, so I want to know how to use it! Thank you!

2

I remember when SELinux was introduced into fedora several years ago. IMO was hideous and OTT for the average user. I prefer the AppArmor approach by far. (I believe you shouldn’t even have to be aware its there as a user). Problematic ACLs can be a nightmare for regular domestic users.

Interesting deiscussion about this here. Quick comparison here too.

I couldn’t find any tutorials specific to openSUSE - it looks like they’ve just introduced (with openSUSE 11.1) kernel compatibility and the basic framework necessary to implement SELinux if desired. If you must bang you head against a brick wall then the following tutorials may offer an insight on the subject:

Fedora SELinux tutorial.

Gentoo SELinux tutorial.

I hope Novell leave users with a choice in the future…

3

If you have not used SELinux before where it is native, e.g. RHEL or Fedora, you are in for an, um, interesting time. Even if you have used it before, you will sometimes give the SELinux developers impolite names when you hit a problem, and you may have to change the happy in your name to angry.

For example on RHEL I discovered that lighttpd’s CGI support was not properly configured for SELinux and there was no way I could find to allow my scripts to execute, short of building lighttpd myself. Anyway the end of that story was that I switched to a different server (mongrel).

4

Just an FYI, but SUSE uses a competing standard called AppArmor. Sure, you MAY be able to use SELinux, but you will likely find better support with AppArmor

5

True and I agree. But, AppArmor isn’t Uncle Sam Qualified where as SELinux is maintained by the NSA. And the only reason that really matters is because some of us are part of the hilt to his sword. If you get my meaning.

Integrate SELinux into AppArmor then were talking business. Even if it is just as a shell to SELinux; prospects will oogle over a fancy GUI to configure security software. … retards.

Build a beast that knows little limits and throw a few pretty things on it and Uncle Sam will snatch it like herpes to a *****…