SELinux by Example: Using Security Enhanced Linux

Chapter 9. Conditional Policies

In this chapter

• 9.1 Overview of Conditional Policies

• 9.2 Boolean Variables

• 9.3 Conditional Statements

• 9.4 Examining Booleans and Conditional Policies with Apol

• 9.5 Summary

• Exercises

In this chapter, we explore conditional policies, created via policy statements and which enable us to define rules enabled or disabled based on circumstances. In this chapter, we discuss the SELinux policy language statements that support conditional policies and explore the use of conditional policies.

9.1 Overview of Conditional Policies

Support for conditional policies was one of the first major functional enhancements to the SELinux policy language after its initial release. Conditional policy statements enable us to ...