selinux January 2010 archive
Main Archive Page > Month Archives  > selinux archives
selinux: Re: SELinux questions...

Re: SELinux questions...

From: Daniel J Walsh <dwalsh_at_nospam>
Date: Tue Jan 12 2010 - 19:51:33 GMT
To: Hasan Rezaul-CHR010 <CHR010@motorola.com>


On 01/12/2010 02:37 PM, Hasan Rezaul-CHR010 wrote:
> Hi All,
>
> I have a few questions that I had asked in the past, so I apologize in
> advance for the repetition. I had a hard-drive crash recently and lost
> all my old emails :-(
>
> 1. What was the SEMANAGE syntax to add selinux user mappings for a GROUP
> as opposed to creating selinux mappings to a specific Linux user ?
>

%name same as sudoers

man semanage
...

       semanage login -{a|d|m} [-sr] login_name | %groupname

> 2. What was the link to the "SELinux User Guide" document that a few
> people have been putting together ?
>

http://docs.fedoraproject.org/selinux-user-guide/f10/en-US/

> 3. Other than the document above, is there any other useful documents
> out there that describe the design details and framework for the latest
> Refpolicy?
>

Well this document exists also.

http://docs.fedoraproject.org/selinux-managing-confined-services-guide/en-US/F11/html/

Not quite what you want.

http://oss.tresys.com/projects/refpolicy

> Thanks as always for your help...
>
>
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.
-- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.