SELinux Cookbook

Chapter 5. Creating a Server Policy

In this chapter, we will cover the following recipes:

• Understanding the service
• Choosing resource types wisely
• Differentiating policies based on use cases
• Creating resource-access interfaces
• Creating exec, run, and transition interfaces
• Creating a stream-connect interface
• Creating the administrative interface

Introduction

Desktop application policies protect a user from vulnerabilities within the application or from unwanted behavior exerted by the application. On a server, however, the impact can be much larger. Server policies are used to protect the entire system from unwanted behavior, abusive access by users, or exploited vulnerabilities within the application.

Services also have a long lifetime. Unlike desktop applications, ...