|
SELinux is proud of its strong security. However, this security is implemented
by defining correct security policies appropriately.
Defining security policies in SELinux is really complecated since they includes more than 200 definition files and 10,000 lines in total. Currently, there is no tool which helps you to modify these definition files with GUI so that you edit them manually. This might cause a misconfiguration in definition.
SELinux Policy Editor can simplify the complicated security policies and
eliminate any misconfiguration of definition.
|
|
|
| Modifying security policies via browser |
|
SELinux Policy Editor is designed to be add-in module to Webmin. Installing Webmin to your SELinux opearting system with SELinux allows you to modify SELinux security policy definitions via browser.
|
|
|
| Verify your configurations from several perspectives |
|
| In SELinux, you configure each process to access to a specific resource
as a security policy. Therefore, it is easy to see a list of resources
you allowed access to a process, but not easy to find out a list of process
you allowed access to a resource. However, you may want to know which process
you allowed to access to a resource to make sure that any resouce doesn't
have inproperite acess by process. SELinux Policy Editor has a feature
to verify security policies from many directions. |
|
|
| Adopting own language |
|
SELinux Policy Editor uses own language as a intermidiate language for
configuring security policies. By adopting the language, you can continue
configuring security policies via browser without noticing any changes
in SELinux definition syntax in the future.
|
|
