SlideShare une entreprise Scribd logo
1  sur  93
Security Enhanced Linux ,[object Object],2010  年  8  月
關於我… .. ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
大綱 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  簡介
[object Object],[object Object],[object Object],[object Object],SELinux  簡介
SELinux  簡介 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  簡介 ,[object Object],[object Object],[object Object]
SELinux  簡介 ,[object Object],[object Object],[object Object]
SELinux  簡介 ,[object Object],[object Object],[object Object],[object Object]
SELinux  簡介 ,[object Object],[object Object],[object Object],[object Object]
SELinux  簡介 ,[object Object],[object Object],[object Object]
傳統  Linux  權限概觀
傳統  Linux  權限問題 ,[object Object],[object Object],[object Object],[object Object]
傳統  Linux  權限問題 ,[object Object],[object Object],[object Object],[object Object]
傳統  Linux  權限問題 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
傳統  Linux  權限問題 ,[object Object],[object Object],[object Object],[object Object]
SELinux  架構概觀
SELinux  架構概觀 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  架構概觀 ,[object Object],[object Object],[object Object]
SELinux  架構概觀 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  架構概觀 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  架構概觀 ,[object Object],[object Object],[object Object],[object Object]
SELinux  架構概觀 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  架構概觀 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  模式切換與啟用
SELinux  狀態檢視與切換 ,[object Object],[object Object],[object Object],SELinux status:  enabled SELinuxfs mount:  /selinux Current mode:  enforcing Mode from config file:  enforcing Policy version:  21 Policy from config file:  targeted
SELinux  狀態檢視與切換 ,[object Object],[object Object],setenforce [ Enforcing | Permissive | 1 | 0 ] ,[object Object],[object Object]
SELinux  啟用 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  啟用 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  啟用 ,[object Object],[object Object],[object Object],[object Object]
SELinux  啟用 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  啟用 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  啟用 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],指定預設  SELinux  啟用的模式環境
SELinux  啟用 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],指定要載入使用的政策資料庫項目
SELinux  啟用 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  安全本文與布林值
SELinux  安全本文與布林值 ,[object Object],[object Object],[object Object]
SELinux  安全本文 ,[object Object],[object Object],[object Object]
SELinux  安全本文 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  安全本文 ,[object Object],[object Object]
SELinux  安全本文 ,[object Object]
SELinux  安全本文檢視 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  安全本文組成 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  安全本文組成 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  安全本文組成 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  安全本文組成 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  安全本文組成 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
系統服務程式與安全本文 ,[object Object],[object Object]
SELinux  安全本文與布林值修改
SELinux  安全本文修改 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  安全本文修改 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  安全本文修改 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  安全本文修改 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux Boolean  項目 ,[object Object],[object Object],[object Object],[object Object]
檢視  SELinux Boolean ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
修改  SELinux Boolean ,[object Object],[object Object],[object Object],[object Object],[object Object]
GUI  介面工具 ,[object Object],[object Object],[object Object]
SELinux  問題診斷
SELinux  問題診斷 ,[object Object],[object Object],[object Object]
SELinux  問題診斷 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  問題診斷 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  問題診斷 ,[object Object],[object Object],[object Object]
SELinux  於  Apache  項目
SELinux  於  Apache  項目 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  於  Apache  項目 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  於  Apache  項目 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  於  Apache  項目 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  於  Apache  項目 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  於  Samba  項目
SELinux  於  Samba  項目 ,[object Object],[object Object]
SELinux  於  Samba  項目 ,[object Object],[object Object],[object Object]
SELinux  於  Samba  項目 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  於  Samba  項目 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  於  FTP  項目
SELinux  於  FTP  項目 ,[object Object],[object Object]
SELinux  於  FTP  項目 ,[object Object],[object Object],[object Object],[object Object]
SELinux  於  FTP  項目 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  於  FTP  項目 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  於  FTP  項目 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  於  FTP  項目 ,[object Object],[object Object],[object Object]
SELinux  於  FTP  項目 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  於  SSH  項目
SELinux  於  SSH  項目 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  於  SSH  項目 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  於  SSH  項目 ,[object Object],[object Object],[object Object]
SELinux  於  Squid  項目
SELinux  於  Squid  項目 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  於  Squid  項目 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  於  Squid  項目 ,[object Object],[object Object],[object Object]
SELinux  自訂規則項目
SELinux  自訂規則項目 ,[object Object],[object Object],[object Object],[object Object],[object Object]
SELinux  自訂規則項目 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Q & A

Contenu connexe

Similaire à Selinux twnic 201008-sa

whatsoever, hardening linux webserver in 60 minutes
whatsoever, hardening linux webserver in 60 minuteswhatsoever, hardening linux webserver in 60 minutes
whatsoever, hardening linux webserver in 60 minutesidsecconf
 
Fundamental know-how of Linux tech
Fundamental know-how of Linux techFundamental know-how of Linux tech
Fundamental know-how of Linux techMichael Huai
 
オリジナルAMIの作成(CentOS)
オリジナルAMIの作成(CentOS)オリジナルAMIの作成(CentOS)
オリジナルAMIの作成(CentOS)Hiroyasu Suzuki
 
分会场六用Storage foundation简化操作系统和存储系统的迁移
分会场六用Storage foundation简化操作系统和存储系统的迁移分会场六用Storage foundation简化操作系统和存储系统的迁移
分会场六用Storage foundation简化操作系统和存储系统的迁移ITband
 

Similaire à Selinux twnic 201008-sa (6)

whatsoever, hardening linux webserver in 60 minutes
whatsoever, hardening linux webserver in 60 minuteswhatsoever, hardening linux webserver in 60 minutes
whatsoever, hardening linux webserver in 60 minutes
 
FISL11 2010 - Automação de Datacenters
FISL11 2010 - Automação de DatacentersFISL11 2010 - Automação de Datacenters
FISL11 2010 - Automação de Datacenters
 
Unix training
Unix trainingUnix training
Unix training
 
Fundamental know-how of Linux tech
Fundamental know-how of Linux techFundamental know-how of Linux tech
Fundamental know-how of Linux tech
 
オリジナルAMIの作成(CentOS)
オリジナルAMIの作成(CentOS)オリジナルAMIの作成(CentOS)
オリジナルAMIの作成(CentOS)
 
分会场六用Storage foundation简化操作系统和存储系统的迁移
分会场六用Storage foundation简化操作系统和存储系统的迁移分会场六用Storage foundation简化操作系统和存储系统的迁移
分会场六用Storage foundation简化操作系统和存储系统的迁移
 

Selinux twnic 201008-sa