Sponsored Content
Special Forums Cybersecurity Apply SeLinux policy to *nix device files Post 302920682 by NYG71 on Friday 10th of October 2014 11:08:53 PM
Old 10-11-2014
Error Apply SeLinux policy to *nix device files

If its possible to apply SELinux policies to unix device files, would that be a problem?

I would like to apply a policy to a process and enforce what it can communicate with device-wise (eg. physical network interface port) based on that policy.

Would think that the "selinux-policy-mls" tool could give me that level of segmentation with SELinux?

Thoughts/suggestions?
 

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Apply transformation logic in 2 different files

:)Transformation logic on column values in two different files, File A 12345,000,4444, HKD3.5 12346,000,5555, HKD3.5 File B 12345,4444,54321,6666 12346,5555, 64321,7777 12347,5555, 65321,8888 Requirement as below 1.read file A 2. match with File B ie if (fileA.column1... (1 Reply)
Discussion started by: HAA
1 Replies

2. UNIX for Dummies Questions & Answers

Let GID apply to new files in directory

Hi, Does anyone know if it is possible to override the GID which files have when they are created in a specific folder? I want the given GID for the folder to apply to the new files created in the folder, no matter what group the owner of the files have... I have tried sticky bits but doesn't... (1 Reply)
Discussion started by: linge
1 Replies

3. Linux

SELinux policy compiler errors for 2.6.26.8.tex1

Hello all! I am trying to enable SELinux on bootup for my supported kernel 2.6.26.8.tex1 I am running PCLinuxOS 2009 Beta 2 which is based on Mandriva/Mandrake From my reading, I know that I am able to set SELinux to boot (preferably in passive mode) however this would still 'change' my... (2 Replies)
Discussion started by: septima.pars
2 Replies

4. Shell Programming and Scripting

Apply `chmod` for multiple files through FTP

Hi all, Can you please help me in this aspect. I devoloped a FTP script to copy a directory to remote server. Now i got stuck-up in changing the file permissions for all the files in directory. I tried to change the permissions of single file and I did it but failed in changing... (3 Replies)
Discussion started by: Chanakya.m
3 Replies

5. Shell Programming and Scripting

How to apply a regular expression in all the files in a directory

I have say 100 text files (with .txt extension) in a directory. An example of the content in the file is given below "NAME" "cgd1_200" "cgd1_3210" "cgd1_560" "cgd2_2760" "cgd2_290" "cgd3_3210" "cgd3_3310" "cgd3_660" "cgd5_2130" "cgd5_4080" "cgd6_3690" "cgd6_4480" "cgd8_1540"... (2 Replies)
Discussion started by: Lucky Ali
2 Replies

6. Shell Programming and Scripting

Apply 'awk' to all files in a directory or individual files from a command line

Hi All, I am using the awk command to replace ',' by '\t' (tabs) in a csv file. I would like to apply this to all .csv files in a directory and create .txt files with the tabs. How would I do this in a script? I have the following script called "csvtabs": awk 'BEGIN { FS... (4 Replies)
Discussion started by: ScKaSx
4 Replies

7. Shell Programming and Scripting

help using find/xargs to apply mp3gain to files

I need to apply mp3gain (album mode) to all mp3 files in a given directory. Each album is in its own directory under /media/data/music/albums for example: /media/data/music/albums/foo /media/data/music/albums/bar /media/data/music/albums/more What needs to happen is: cd... (4 Replies)
Discussion started by: audiophile
4 Replies

8. Shell Programming and Scripting

reading information from a table and apply a command on multiple files

Hey gyuz, I wanna calculate the number of mapped reads of a bam file in a region of interest. I used this code to do so : samtools view input.bam chrname:region1 > region1.txt This will store all the reads from given bam file within the region of interest in region1.txt Now I have... (5 Replies)
Discussion started by: @man
5 Replies

9. Shell Programming and Scripting

Apply argument to all files in directory

Hi all: i need to run a rather simple command-line argument: head -200 input > output However, I need to do it on several files, all in the same directory. Is this possible? (2 Replies)
Discussion started by: owwow14
2 Replies

10. Shell Programming and Scripting

Apply command to all files in folder

Hi all! I have this command grep -E '^\To: |^\Date: |^\Subject: ' fileA.txt > fileA_1.txt && grep -v '^\To: |^\Date: |^\Subject: ' fileA.txt >> fileA_1.txt && rm fileA.txt && sed -i -e 's/\(Date: \|Subject: \|To: \)//g' fileA_1.txtHow do I apply it to all the files in the folder (each file has a... (7 Replies)
Discussion started by: guilliber
7 Replies
sestatus(8)						SELinux command line documentation					       sestatus(8)

NAME
sestatus - SELinux status tool SYNOPSIS
sestatus [-v] [-b] This tool is used to get the status of a system running SELinux. DESCRIPTION
This manual page describes the sestatus program. This tool is used to get the status of a system running SELinux. It displays data about whether SELinux is enabled or disabled, location of key directories, and the loaded policy with its status as shown in the example: > sestatus SELinux status: enabled SELinuxfs mount: /selinux SELinux root directory: /etc/selinux Loaded policy name: targeted Current mode: permissive Mode from config file: enforcing Policy MLS status: enabled Policy deny_unknown status: allow Max kernel policy version: 26 sestatus can also be used to display: - The security context of files and processes listed in the /etc/sestatus.conf file. The format of this file is described in ses- tatus.conf(5). - The status of booleans. OPTIONS
-v Displays the contexts of files and processes listed in the /etc/sestatus.conf file. It also checks whether the file is a symbolic link, if so then the context of the target file is also shown. The following contexts will always be displayed: The current process context The init process context The controlling terminal file context -b Display the current state of booleans. FILES
/etc/sestatus.conf AUTHOR
This man page was written by Daniel Walsh <dwalsh@redhat.com>. The program was written by Chris PeBenito <pebenito@gentoo.org> SEE ALSO
selinux(8), sestatus.conf(5) Security Enhanced Linux 26 Nov 2011 sestatus(8)
All times are GMT -4. The time now is 12:35 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy