Chapter 10. SELinux Use Cases
The previously described SELinux operational controls need to be aligned to suit administrators' goals and requirements. In this chapter, several cases will be described that will teach administrators to:
- Harden web servers through SELinux category support and proper file labeling
- Secure shell services through the separation of SSH instances and different PAM service usage of the SSH daemon
- Configure the NFS server to deal with different SELinux file contexts and tune applications to use the NFS-exposed files
We'll end the chapter with a small comparison of Samba's SELinux implementation and the NFS configuration documented earlier.
Hardening web servers
Web servers are a common infrastructural service in many architectures. ...