danwalsh


Dan Walsh's Blog

Got SELinux?


Previous Entry Add to Memories Share Next Entry
SELinux Symposium is Coming up
danwalsh
Finally raising my head up from the Red Hat Enterprise Linux 5 Release.

If you have been regularly reading this BLOG, you probably have some interest in SELinux, well next month you have an opportunity to meet the different people working on the project.  The SELinux Symposium will be held on March 12 - 16, 2007 in Baltimore, Md.  The first two days are full of tutorials including SELinux for Dummies presented by yours truly and Karl MacMillan.  Of course they will not allow me to call it this, so here is how they describe it:

Managing SELinux Systems

Instructors: Dan Walsh and Karl MacMillan, Red Hat Inc.
Tutorial Description: This tutorial is a hands-on, practical introduction to managing SELinux. We will cover the basics of what SELinux is and more importantly how to handle problems you may encounter on an SELinux machine. We will cover the way SELinux runs on Fedora Core 6/Red Hat Enterprise Linux 4/Red Hat Enterprise Linux 5 systems.

Pre-requisites: Knowledge of Linux system administration and security. Basic SELinux knowledge is helpful but not required.

Audience: System administrators and security professionals

Topics will include:

  • Introduction to the targeted policy
  • Modified commands and SELinux utilities
  • Understanding SELinux log messages
    • Examining setroubleshoot tool
  • Customizing the policy with booleans
  • Generating local policy customizations
    • Using audit2allow to generate a local policy module
  • Managing file labeling
  • Backup and disk management with SELinux
  • Differences between RHEL4 and RHEL5
  • Using system-config-selinux
  • Future directions in SELinux targeted policy

This is a hands-on tutorial.


I have given this talk several times, and most people say it was critical to helping them understand SELinux.  So if you can want to learn more about SELinux, I would recommend you attend.  BTW, I do not get paid to teach the course, but do accept extra drink tickets. 

The next two days of the Symposium are more seminar style, a series of 30-45 minute  talks on different areas of research and development in SELinux.   This symposium is a great opportunity to not only meet some of the developers but also to influence the direction of SELinux.

So if you have the ability to get to this conference, I would strongly suggest you attend, and if you do don't hesitate to introduce your self.  Besides Baltimore in early March the weather is beautiful.  :^)

This would make a great screen-cast

(Anonymous)

2007-02-06 05:33 pm (UTC)

The items covered in this tutorial are absolutely essential to dealing with various commercial software and SeLinux. On too many systems, I have to set selinux in permissive or turn it off completely because soemthing (Oracle, RHN, Appworks, etc) doesnt know how to deal with selinux and dies horribly. Knowing how to set up Selinux policies for RHEL-4 and RHEL-5 systems is a wonderful thing to add to ones resume ;).

[What drink does one want for those who can't make it to the conferance for monetary reasons.]

smooge@gmail.com

Re: This would make a great screen-cast

(Anonymous)

2007-02-07 12:55 am (UTC)

Yes, PLEASE do a screen cast or otherwise video the presentation! I love the way google videos their tech talks and puts them on google video. I have been following SE Linux since the beginning but still do not know nearly as much about it as I would like. I too still have to turn off selinux all too often. With the introduction of RHEL 5 I intend to run all of our new machines in targeted mode but I need to learn how to deal with the inevitable problems and modify the policy accordingly.

Tracy R Reed
Senior System Administrator
DrJays.com

Re: This would make a great screen-cast

(Anonymous)

2007-04-05 08:27 pm (UTC)

very nice informations.thank you very much.and ver nice blog i will come here all the time.thankss... www.evdenevenakliyecim.biz

One of the things we discussed afterwards was that this sort of thing has always been happening, but until YouTube came along, the only way we'd have seen it was to know these guys and have been around while they were jamming, to have seen them at a coffeehouse or open-mike, or for them to have been busking on a street corner when we were passing by.

One of the things we discussed afterwards was that this sort of thing has always been happening, but until YouTube came along, the only way we'd have seen it was to know these guys and have been around while they were jamming, to have seen them at a coffeehouse or open-mike, or for them to have been busking on a street corner when we were passing by.

ertertedfg

Could you please share it as a webcast?

(Anonymous)

2007-05-27 09:35 am (UTC)

Hi,
I'd love to get my hands on a webcast or video recording of the speech. Is this possible? Thanks.

Re: Could you please share it as a webcast?

danwalsh

2007-05-29 12:15 pm (UTC)

Here is a somewhat dated web cast I did.


http://www.redhat.com/v/swf/SELinux/

Org Proxy-Connection: close De DE/SELinux - FedoraProject /* */ Fedora Personal tools Log in / create account Views Article Discussion View source History wiki Main Page Events Recent changes Random page Help Navigation Home Get Fedora Join Fedora sub-projects Ambassadors Artwork Bug Zappers Documentation Infrastructure Internationalization Localization Marketing Package Maintainers Websites Weekly News All projects Search   Toolbox What links here Related changes Upload file Special pages Printable version Permanent link De DE/SELinux From FedoraProject < De DE Jump to: navigation , search Fedora-SELinux-Projekt-Seite SELinux verstehen Diskussion der Policies FAQs Fehler beheben bei SELinux Multi Category Security/MCS Multi Level Security/MLS Ladbare Module Hilfsmittel zum Erzeugen von Policies Hilfsmittel bei der Fehlersuche Themen Neue SELinux-Eigenschaften in FC5 SELinux-Kommandos Confined Domains Dokumentation Fedora-SELinux-FAQ Red Hat Enterprise Linux 4 - SELinux Guide httpwww.

You are viewing danwalsh