Linux is a dominant player in many organizations and in the cloud. Securing the Linux environment is extremely important for any organization, and Security-Enhanced Linux (SELinux) acts as an additional layer to Linux system security.

SELinux System Administration covers basic SELinux concepts and shows you how to enhance Linux system protection measures. You will get to grips with SELinux and understand how it is integrated. As you progress, you'll get hands-on experience of tuning and configuring SELinux and integrating it into day-to-day administration tasks such as user management, network management, and application maintenance. Platforms such as Kubernetes, system services like systemd, and virtualization solutions like libvirt and Xen, all of which offer SELinux-specific controls, will be explained effectively so that you understand how to apply and configure SELinux within these applications. If applications do not exert the expected behavior, you'll learn how to fine-tune policies to securely host these applications. In case no policies exist, the book will guide you through developing custom policies on your own.

By the end of this Linux book, you'll be able to harden any Linux system using SELinux to suit your needs and fine-tune existing policies and develop custom ones to protect any app and service running on your Linux systems.

Linux是许多组织和云中的一个主导者。确保Linux环境的安全对任何组织都极为重要，而安全增强型Linux（SELinux）则是Linux系统安全的一个附加层。

SELinux系统管理涵盖了基本的SELinux概念，并告诉你如何加强Linux系统的保护措施。你将掌握SELinux并了解它是如何整合的。随着你的进步，你将获得调整和配置SELinux的实践经验，并将其整合到日常管理任务中，如用户管理、网络管理和应用程序维护。Kubernetes等平台，systemd等系统服务，以及libvirt和Xen等虚拟化解决方案，都提供了SELinux特定的控制，我们将对这些平台进行有效的解释，使你了解如何在这些应用中应用和配置SELinux。如果应用程序没有施加预期的行为，你将学习如何微调策略以安全地托管这些应用程序。如果没有政策存在，本书将指导你自己开发自定义政策。

在这本Linux书的最后，你将能够使用SELinux加固任何Linux系统，以满足你的需要，并微调现有的策略，开发自定义的策略，以保护在你的Linux系统上运行的任何应用程序和服务。