| |
The intensive search for a more secure operating system has often left everyday, production computers far behind their experimental, research cousins. Now SELinux (Security Enhanced Linux) dramatically changes this. This bestknown and most respected securityrelated extension to Linux embodies the key advances of the security field. Better yet, SELinux is available in widespread and popular distributions of the Linux operating systemincluding for Debian, Fedora, Gentoo, Red Hat Enterprise Linux, and SUSEall of it free and open source. SELinux emerged from research by the National Security Agency and implements classic strongsecurity measures such as rolebased access controls, mandatory access controls, and finegrained transitions and privilege escalation following the principle of least privilege. It compensates for the inevitable buffer overflows and other weaknesses in applications by isolating them and preventing flaws in one application from spreading to others. The scenarios that cause the most cyberdamage these dayswhen someone gets a toehold on a computer through a vulnerability in a local networked application, such as a Web server, and parlays that toehold into pervasive control over the computer systemare prevented on a properly administered SELinux system. The key, of course, lies in the words "properly administered." A system administrator for SELinux needs a wide range of knowledge, such as the principles behind the system, how to assign different privileges to different groups of users, how to change policies to accommodate new software, and how to log and track what is going on. And this is where SELinux is invaluable. Author Bill McCarty, a security consultant who has briefed numerous government agencies, incorporates his intensive research into SELinux into this small but informationpacked book. Topics include: A readable and concrete explanation of SELinux concepts and the SELinux security model Installation instructions for numerous distributions Basic system and user administration A detailed dissection of the SELinux policy language Examples and guidelines for altering and adding policies.With SELinux, a highsecurity computer is within reach of any system administrator. If you want an effective means of securing your Linux systemand who doesn`t?this book provides the means.
|
| |
|