Hacker News Reader

For anyone curious or learning about SELinux, I highly recommend the SELinux Coloring Book [1] as an overview of core concepts. It doesn't go into any of the commands or mechanics of interacting with SELinux, but it has some simple and clear examples of objects, labels, and enforcement types.

[1] https://people.redhat.com/duffy/selinux/selinux-coloring-boo...

View on HN

I've always found that the concepts are not the difficult part of SELinux. Instead it's the complexity of the configuration and tooling which is always a headache.

> I've always found that the concepts are not the difficult part of SELinux.

There’s tons of good information on this part.

> Instead it's the complexity of the configuration and tooling which is always a headache.

There’s practically nothing on this. `man selinux` lists some of the tools (last updated in 2005) in “see also” section. On Fedora, half the referenced man pages are missing, though. You’ll need to read a book (or a book’s worth of man pages) to get anywhere.

Reply on news.ycombinator.com