Researching the application's logical design
Before embarking on a policy development spree, we need to look at the application's behavior and logical design. We will get to know the application and its interactions as we begin to model this into the SELinux policy.
How to do it…
To prepare an SELinux policy for the application, let's first look at how the application behaves:
- Look into the files and directories that the application will interact with and write down the privileges that the application needs. Try to structure access based on the functionalities of the application.
- Figure out which network resources are required by the application, which ports does the application bind (listen) to (if any), and which ports does it need to connect to. ...
Get SELinux Cookbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
