Changes

Jump to: navigation, search

SELinux Policy Analysis

860 bytes added, 14:06, 5 November 2012
Links/Bugs/Tracking
== Project Description ==
The SELinux policy has never been reviewed to determine best practices for policy in a general-distribution context such as Fedora. This project provides such a policy review. It will also propose a packaged SELinux policy for an application that does not yet have one.
<!-- Description should be no longer than a paragraph. Include links to any relevant on-line resources. For example, [http://fedoraproject.org/wiki] or [http://developer.mozilla.org MDC]. -->
<sub></sub> Project Leader(s): '''Jamal JalaliPeter Valerio''' <br />   Wiki Page: [[User:Jamal_Jalali-DolatshahiPvalerio]]<br />IRC: jjalali<br /> '''Zhi Chang Ou'''pvalerio<br />Wiki Page: [[User: Zhi Chang Ou]]<br />IRC: maximum
= Project Contributor(s) ==
<!-- Note: each contributor is expected to have unique goals. These goals may be ''related'' to other students' work, but must be ''distinct'' and ''attainable'' regardless of the state of the other students' work. For example, under the umbrella of one project title, one student may work on packaging a piece of software and another may work on documentation, or one may work on solving one bug and another on solving another bug, but two students must not work on the same bug or depend on the other students' work in order to be able to complete their own project. -->
* 0.1
Download and install the source rpm for the SELinux policy and study the policy source file. Look at the policy source code used by Fedora 17 and report on
(a) what domains, file contexts and SELinux users have been defined
(b) classification of each domain
(c) what applications, system services, etc had been confined by SELinux policy on Fedora 17
 
Link to source rpm: http://koji.fedoraproject.org/koji/buildinfo?buildID=363460
 
* 0.2
Investigate and report on the steps Fedora takes to add new policy modules to newer Fedora releases.
* 0.3
Attempt to write and package an SELinux policy for an application that does not yet have one. (SQLite)
== Communication ==
=== Links/Bugs/Tracking ===
SElinux download: [http://wwwkoji.fedoraproject.org/koji/buildinfo?buildID=363460]
=== Source Code Control ===

Navigation menu