Next: 4 See what's happening
Up: SELinux Policy Editor(seedit) Administration
Previous: 2 Background of SELinux
Contents
You can manage SELinux from SELinux Policy Editor's GUI.
GUI is X Window based.
In this tutorial, how to use GUI is shown first. You can also manage
from command line, it is shown later.
You can launch GUI from Gnome menu. Choose Desktop Manage SELinux
Policy Editor.
You can also launch GUI, by typing seedit-gui.
You will see window SELinux Policy Editor Control Panel.
In the control panel, you will see icons(you will see buttons instead of
icons in Cent OS 4) like figure 1.
Figure 1:
SELinux Policy Editor Control Panel
|
By double-clicking icon, management windows open.
What you can do by double-clicking icons is summarized in following.
- Status
The usage is shown in section 4.3.
- See status of SELinux, such as SELinux mode, domains for
running process, domains for network process.
- Change SELinux mode
- Manage Domain
- Create new domain(section 9)
- Remove domain, disable domain(section 6.1)
- Generate Policy(section 8.3)
- Generate policy from access log
- Edit policy(section 7.3)
- Edit policy by text editor. The text editor has some
useful features.
- Apply policy,Relabel
- Load policy manually
Policy is load automatically in GUI, but you can do it manually.
- Initialize all file labels
- Run restorecon command
Next: 4 See what's happening
Up: SELinux Policy Editor(seedit) Administration
Previous: 2 Background of SELinux
Contents
2006-07-05