Investigating domain transitions
An important analytical approach when dealing with SELinux policies is to perform a domain transition analysis. Domains are bounded by the access controls in place for a given domain, but users or processes can transition to other domains by executing the right set of applications.
Analyzing whether and how a transition can occur between two SELinux domains allows administrators to validate the secure state of the policy. Given the mandatory nature of SELinux, adversaries will find it difficult to be able to execute target applications if a domain transition analysis shows that the source domain cannot execute said application, either directly or indirectly.
Administrators should use domain transition analysis to confirm a domain is correctly confined, and that vulnerabilities within the applications running inside a domain cannot lead to privilege escalations.
Using apol for domain transition analysis
After starting apol, select New Analysis...
