4.7 SELinux
SELinux is a security enhancement to Linux that allows users and administrators better access control.
Access can be constrained on variables so as to enable specific users and applications to access specific resources. These
resources may take the form of files. Standard Linux access controls, such as file modes (-rwxr-xr-x) are modifiable by the user
and the applications which the user runs. Conversely, SELinux access controls are determined by a policy loaded on the system,
which are not changed by careless users or misbehaving applications.
SELinux also adds finer granularity to access controls. Instead of only being able to specify who can read, write or execute a file,
for example, SELinux lets you specify who can unlink, append only, move a file, and so on. SELinux allows you to specify access
to many resources other than files as well, such as network resources and interprocess communication (IPC).
More information can be found at official Security Enhanced Linux (SELinux) project page:
.
4.7.1 Running SELinux demo
This section describes the procedure for running the SELinux demo on NXP's LS1043ARDB-64bit and LS1046ARDB-64bit
platforms.
4.7.1.1 Obtaining the image for SELinux
The SELinux can run on the NXP platforms:- LS1028ARDB, LS1043ARDB-64bit, and LS1046ARDB-64bit with Ubuntu file
system.
Use the below commands for building these two platforms for the SELinux demo:
$ cd openil
$ make clean
$ make nxp_ls1043ardb-64b_ubuntu_defconfig # for ls1043ardb-64b platform
# or
$ make nxp_ls1046ardb-64b_ubuntu_defconfig # for ls1046ardb-64b platform
# or
$ make nxp_ls1028ardb-64b_ubuntu_defconfig # for ls1028ardb-64b platform
$ make
# or make with a log
$ make 2>&1 | tee build.log
4.7.1.2 Installing basic packages
Install the following basic packages before running the SELlinux demo:
1. Basic packages:
• $ apt-get update
• $ apt-get install dpkg
• $ apt-get install vim
• $ apt-get install wget
• $ apt-get install bzip2
• $ apt-get install patch
• $ apt-get install bison
• $ apt-get install flex
• $ apt-get install xz-utils
• $ apt-get install auditd
NXP Semiconductors
Industrial features
Open Industrial User Guide, Rev. 1.8, 05/2020
User's Guide
59 / 199
