Subsystem Update: State of SELinux, 2019
Talkat Linux Security Summit North America 2019 · on Wednesday, 2019-08-21· at 16:00· Sapphire D, Hilton San Diego Bayfront·
summary
Kernel prints invalid file labels in audit records and cgroup v2 labeling via cgroupfs is implemented and working, plus SELinux now permits filesystem submounts and tightens internal SID-table mappings; the make dummy policy tool is modernized. Userland ships policycoreutils 2.9 with Python 3 as default, se-tools 4.2 requires Python 3 and adopts a site-backed policy representation. Ongoing work includes reviving SELinux namespaces (forward-porting patches) and adding fanotify-style filesystem notification controls. Contributions come from a small core of top contributors.
AI-written summary · about
chapters (11)
- 0:00Intro
- 1:40Kernel
- 4:01Top 10 Contributors
- 4:39User Space
- 5:23Contributors
- 5:38SE Tools
- 6:44Chris
- 7:13Reference Policy Highlights
- 7:28Top Contributors
- 7:38Work in Progress
- 9:32Wrap Up
related talks
19mSELinux Update
09mSub-system Update: State of SELinux
31mOverview and Recent Developments: SELinux
15mSELinux
45mSELinux All the Way Down: Namespaces for SELinux
14mWhat Have I Modified in SELinux: a new addition to your SELinux toolbox
49mSELinux introduction
46m20 years of NSA Security Enhanced Linux, a Retrospective