Thesis Details

Rozšíření nástroje audit2allow pro poskytování více omezujících řešení

Bachelor's Thesis Student: Žárský Jan Academic Year: 2017/2018 Supervisor: Smrčka Aleš, Ing., Ph.D.
English title
Extending audit2allow to Provide More Restrictive Solutions
Language
Czech
Abstract

The thesis analyzes the role of the audit2allow utility in troubleshooting Security-Enhanced Linux denials and proposes extensions that will provide more restrictive and more secure solutions to the user. Basic concepts of SELinux and SELinux security policy are explained. Situations when audit2allow provides ineffective and insecure solutions are analyzed. Support for generating extended permission access vector rules was implemented. Basic support for checking security labels of files was implemented. Implementation details and testing of both extensions to the audit2allow utility are described.

Keywords

SELinux, audit2allow, security, mandatory access control, security policy

Department
Department of Intelligent Systems FIT BUT
Degree Programme
Information Technology
Files
Status
defended, grade A
Date
11 June 2018
Reviewer
Janoušek Vladimír, doc. Ing., Ph.D.
Committee
Vojnar Tomáš, prof. Ing., Ph.D. (DITS FIT BUT), předseda
Čadík Martin, doc. Ing., Ph.D. (DCGM FIT BUT), člen
Honzík Jan M., prof. Ing., CSc. (DIFS FIT BUT), člen
Kořenek Jan, doc. Ing., Ph.D. (DCSY FIT BUT), člen
Smrčka Aleš, Ing., Ph.D. (DITS FIT BUT), člen
Citation
ŽÁRSKÝ, Jan. Rozšíření nástroje audit2allow pro poskytování více omezujících řešení. Brno, 2018. Bachelor's Thesis. Brno University of Technology, Faculty of Information Technology. 2018-06-11. Supervised by Smrčka Aleš. Available from: https://www-dev.fit.vutbr.cz/study/thesis/20725/
BibTeX 
@bachelorsthesis{FITBT20725,
    author = "Jan \v{Z}\'{a}rsk\'{y}",
    type = "Bachelor's thesis",
    title = "Roz\v{s}\'{i}\v{r}en\'{i} n\'{a}stroje audit2allow pro poskytov\'{a}n\'{i} v\'{i}ce omezuj\'{i}c\'{i}ch \v{r}e\v{s}en\'{i}",
    school = "Brno University of Technology, Faculty of Information Technology",
    year = 2018,
    location = "Brno, CZ",
    language = "czech",
    url = "https://www.fit.vut.cz/study/thesis/20725/"
}

Theses

Back to top