Product SiteDocumentation Site

⁠Chapter 11. Managing Confined Services

11.1. Introduction
11.2. The Apache HTTP Server
11.2.1. The Apache HTTP Server and SELinux
11.2.2. Types
11.2.3. Booleans
11.2.4. Configuration examples
11.3. Samba
11.3.1. Samba and SELinux
11.3.2. Types
11.3.3. Booleans
11.3.4. Configuration examples
11.4. File Transfer Protocol
11.4.1. FTP and SELinux
11.4.2. Types
11.4.3. Booleans
11.4.4. Configuration Examples
11.5. Network File System
11.5.1. NFS and SELinux
11.5.2. Types
11.5.3. Booleans
11.5.4. Configuration Examples
11.6. Berkeley Internet Name Domain
11.6.1. BIND and SELinux
11.6.2. Types
11.6.3. Booleans
11.6.4. Configuration Examples
11.7. Concurrent Versioning System
11.7.1. CVS and SELinux
11.7.2. Types
11.7.3. Booleans
11.7.4. Configuration Examples
11.8. Squid Caching Proxy
11.8.1. Squid Caching Proxy and SELinux
11.8.2. Types
11.8.3. Booleans
11.8.4. Configuration Examples
11.9. MySQL
11.9.1. MySQL and SELinux
11.9.2. Types
11.9.3. Booleans
11.9.4. Configuration Examples
11.10. PostgreSQL
11.10.1. PostgreSQL and SELinux
11.10.2. Types
11.10.3. Booleans
11.10.4. Configuration Examples
11.11. rsync
11.11.1. rsync and SELinux
11.11.2. Types
11.11.3. Booleans
11.11.4. Configuration Examples
11.12. Postfix
11.12.1. Postfix and SELinux
11.12.2. Types
11.12.3. Booleans
11.12.4. Configuration Examples

⁠11.1. Introduction

This part of the book focuses more on practical tasks and provides information how to set up and configure various services with SELinux. For each service, there are listed the most common types and Booleans with the specifications. Also included are real-world examples of configuring those services and demonstrations of how SELinux complements their operation.
When SELinux is in enforcing mode, the default policy used in Fedora, is the targeted policy. Processes that are targeted run in a confined domain, and processes that are not targeted run in an unconfined domain. See Section 10.3, “Targeted Policy” for more information about targeted policy and confined and unconfined processes.