Design/SELinuxConfig

From FedoraProject

< Design
Revision as of 20:42, 26 August 2013 by Ryanlerch (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search
Artwork ArtTeamProjects WikiDesign ArtTeamN1.png

Contents

Current UI

Flat navigation between the following tabs:

Screenshots

Status

Sysconfig-selinux-screenshot-status.png

Boolean

Sysconfig-selinux-screenshot-boolean.png

File Labeling

Sysconfig-selinux-screenshot-filelabels.png

User Mapping

Sysconfig-selinux-screenshot-usermapping.png

SELinux User

Sysconfig-selinux-screenshot-selinuxuser.png

Translation

Sysconfig-selinux-screenshot-translation.png

Network Port

Sysconfig-selinux-screenshot-networkports.png

Policy Module

Sysconfig-selinux-screenshot-policymods.png

Process Domain

Sysconfig-selinux-screenshot-procdoms.png

Mockup Proposal 1

Gist of the changes - split the tabs into two main sections - SELinux configuration, and SELinux managed objects:

  • SELinux Configuration:
    • current enforcing mode / default enforcing mode / policy provider / current policy (advanced)
    • policy modules
    • booleans
    • security levels
  • SELinux Managed Objects:
    • files
    • users (integration of selinux users & user mappings)
    • network ports
    • processes

Mockup source: Media:sysconfig-selinux-mocks1_source.svg


SELinux Configuration

General

Sysconfig-selinux-general.png

Policy Modules

File:Sysconfig-selinux-policymods.png (in progress)

Booleans

File:Sysconfig-selinux-bools.png (in progress)

Security Levels

File:Sysconfig-selinux-seclevels.png (in progress)

SELinux Managed Objects

Files

Sysconfig-selinux-files.png

Users

Sysconfig-selinux-users.png

Network Ports

Sysconfig-selinux-ports.png

Processes

Issues:

  • It's not actually displaying all process domains but a rough guess at them.
  • Domains which are defined as permissive in a policy module not name <domain>_Permissive will be displayed as enforcing.

The idea of permissive domains is to turn SELinux off for some things but not everything. Sysconfig-selinux-procs.png

Mockup Proposal 2

Keep the tabs flat as they are today, integrating the two user-related tabs, but make the tabs go straight across.