Summary
In this chapter, we saw how file contexts are stored as extended attributes on the filesystem and where SELinux keeps its definition on what contexts are to be assigned on which files. We also learned to work with the semanage tool to manipulate this information.
On the process level, we got our first taste of SELinux policies, identifying when a process is launched inside a certain SELinux domain. With it, we touched the sesearch and seinfo applications to query the SELinux policy.
In the next chapter, we will expand our knowledge of protecting the operating system from a regular file, and process protection measures towards the networking-related features of SELinux.
