Skip to Content
SELinux
book

SELinux

by Bill McCarty
October 2004
Intermediate to advanced
256 pages
8h 16m
English
O'Reilly Media, Inc.
Content preview from SELinux

Appendix E. SELinux Type Attributes

Table E-1 summarizes the SELinux type attributes appearing in the Fedora Core 2 implementation of SELinux. Other implementations may define different type attributes or assign different meaning to attributes shown in the table.

Table E-1. SELinux type attributes

Type attribute

Description

admin

Administrator domain, such as sysadm_t

auth

Domain that can read /etc/shadow

auth_chkpwd

Domain that can authenticate users by running unix_chkpwd

auth_write

Domain that can write or relabel /etc/shadow

dbus_client_domain

Domain of dbus client

device_type

Type assigned to device nodes

domain

Type that can be assigned to a process

etc_writer

Domain that can write to etc_t

exec_type

Type assigned to executables that are domain entry points

file_type

Type assigned to files in persistent filesystems

fs_domain

Domain that can directly access a fixed disk

fs_type

Type assigned to filesystems, including nonpersistent filesystems

gphdomain

Domain derived from gnome-pty-helper

home_dir_type

Type assigned to the parent directory holding user home directories

home_type

Type assigned to home directories

homedirfile

Type of special file in home directory, used to associate mount points with home directories

lockfile

Type assigned to lock files or directories

logfile

Type assigned to log files or directories

login_contexts

Type assigned to files used to define default contexts for login type

mail_server_domain ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Mastering Security-Enhanced Linux (SELinux)

Mastering Security-Enhanced Linux (SELinux)

Sander van Vugt
Kubernetes Security and Observability

Kubernetes Security and Observability

Brendan Creane, Amit Gupta
Hacking Kubernetes

Hacking Kubernetes

Andrew Martin, Michael Hausenblas

Publisher Resources

ISBN: 0596007167Catalog PageErrata