TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

The SELinux coloring book [pdf]

216 pointsby mromniaabout 8 years ago

18 comments

Dangerangerabout 8 years ago
This trend of using illustration to explain complex topics is really wonderful. I know that people may criticize it as childish, but I find it helpful and enlightening.<p>The illustrations that I&#x27;ve found most amazing and well done are created by people like:<p>Lin Clark (<a href="https:&#x2F;&#x2F;code-cartoons.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;code-cartoons.com&#x2F;</a>)<p>Julia Evans (<a href="http:&#x2F;&#x2F;jvns.ca&#x2F;zines&#x2F;" rel="nofollow">http:&#x2F;&#x2F;jvns.ca&#x2F;zines&#x2F;</a>)<p>Linda Liukas (<a href="http:&#x2F;&#x2F;www.helloruby.com&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.helloruby.com&#x2F;</a>)<p>Amy Wibowo (<a href="https:&#x2F;&#x2F;shop.bubblesort.io&#x2F;" rel="nofollow">https:&#x2F;&#x2F;shop.bubblesort.io&#x2F;</a>)<p>You may notice a trend with the gender of the authors above. I personally believe that women have a better sense for simplifying complex ideas, and greater empathy and patience for teaching those ideas once they&#x27;ve been made simple.
评论 #13784314 未加载
评论 #13793400 未加载
评论 #13784154 未加载
评论 #13784279 未加载
评论 #13785939 未加载
评论 #13784761 未加载
评论 #13785799 未加载
fideloperabout 8 years ago
The thing that made SELinux click for me was this talk - it&#x27;s really a great talk for SELinux: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=MxjenQ31b70" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=MxjenQ31b70</a><p>(I also have a video explaining some specific&#x2F;common things: <a href="https:&#x2F;&#x2F;serversforhackers.com&#x2F;video&#x2F;battling-selinux-cast" rel="nofollow">https:&#x2F;&#x2F;serversforhackers.com&#x2F;video&#x2F;battling-selinux-cast</a>)
krylonabout 8 years ago
SELinux always makes me feel like I&#x27;m a complete idiot (the worst thing about that is that I could be an idiot and not know it or refuse to acknowledge it).<p>So, maybe this introduction will make it a little more accessible.
评论 #13782861 未加载
评论 #13782868 未加载
评论 #13784634 未加载
评论 #13783988 未加载
saycheeseabout 8 years ago
At the point you have to make a &quot;cute&quot; coloring book (for adults) to make your OS seem more friendly, maybe it&#x27;s time to reflect on the reality that there&#x27;s something fundamentally wrong with the reasoning used to justify the logic required to use it.
评论 #13782989 未加载
ourmandaveabout 8 years ago
So the lesson is (just looking at the pictures) if I don&#x27;t disable SELinux a puppy will starve?
评论 #13783038 未加载
godmodusabout 8 years ago
That kernel though. Damn awesome work, made me smile.
评论 #13783194 未加载
评论 #13782945 未加载
jamiethompsonabout 8 years ago
As a colouring book, it&#x27;s not great.
评论 #13785041 未加载
评论 #13783173 未加载
rdtscabout 8 years ago
Just curious, anyone here not working on government systems ever enabled MLS mode and used it successfully?
评论 #13786635 未加载
pwernersbachabout 8 years ago
I love this idea. It&#x27;s not meant to teach people everything, but it shows the basic SELinux concepts in a fun manner, that is different from the typical dry written documentation.<p>The best utility that this has is that it gets people asking questions. I could put this on my wall at work, and then when my colleagues ask about it, I could use it to segue into actually teaching them about SELinux. Putting the SELinux text documentation on my wall would not have the same effect.
dchestabout 8 years ago
From @lattera on Twitter:<p>here&#x27;s a couple lost pages found by the grsecurity folks:<p><a href="https:&#x2F;&#x2F;grsecurity.net&#x2F;~spender&#x2F;pics&#x2F;lost_selinux_coloring_book_page1.gif" rel="nofollow">https:&#x2F;&#x2F;grsecurity.net&#x2F;~spender&#x2F;pics&#x2F;lost_selinux_coloring_b...</a><p><a href="https:&#x2F;&#x2F;grsecurity.net&#x2F;~spender&#x2F;pics&#x2F;lost_selinux_coloring_book_page2.gif" rel="nofollow">https:&#x2F;&#x2F;grsecurity.net&#x2F;~spender&#x2F;pics&#x2F;lost_selinux_coloring_b...</a><p>:)
ryanmarshabout 8 years ago
Wow I feel like I understand SELinux. Guess I can stop turning it off now...
ghaffabout 8 years ago
For those who liked this, the authors have another one on containers: <a href="https:&#x2F;&#x2F;raw.githubusercontent.com&#x2F;fedoradesign&#x2F;coloringbook-containers&#x2F;master&#x2F;Print-Ready&#x2F;Web.pdf" rel="nofollow">https:&#x2F;&#x2F;raw.githubusercontent.com&#x2F;fedoradesign&#x2F;coloringbook-...</a>
beevai142about 8 years ago
The problem with SELinux is not really in the beginner documentation, but in the documentation of the policy macro packages eg. in Fedora -- which are what you in the end should&#x2F;need to use for actually writing or modifying policies.<p>Answers to questions on eg. finding the difference between &quot;userdom_user_application_domain&quot; and &quot;application_domain&quot;, or learning that &quot;~&#x2F;.local&#x2F;share&quot; has the symbolic name &quot;data_home_t&quot; are very difficult to find. Everything in SElinux has a symbolic name, so there&#x27;s also at least one more layer of indirection as compared to apparmor.
sdrothrockabout 8 years ago
I don&#x27;t necessarily think that the illustrations are what makes this great. They&#x27;re cute, but the simple and explicit examples with uncontrived situations are what really makes this worthwhile.<p>It may be that getting into &quot;writing for a coloring book&quot; mode makes people think simpler and &quot;cuter,&quot; which lends itself well to quick illustration of complex ideas.<p>I&#x27;d like to see more of this kind of explanation in guides and manuals in general, with the &quot;normal&quot; manuals being for reference when people need to drill down into something specific.
ghaffabout 8 years ago
I think the version in this link may be an old one. In the version on Github (<a href="https:&#x2F;&#x2F;github.com&#x2F;mairin&#x2F;selinux-coloring-book&#x2F;blob&#x2F;4ac589bb80af52159b39abb1f9520267551df5df&#x2F;Print-Ready&#x2F;Web.pdf" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;mairin&#x2F;selinux-coloring-book&#x2F;blob&#x2F;4ac589b...</a>), I see at least one typo that&#x27;s fixed and I believe there are other differences as well.
justin_oaksabout 8 years ago
I just wish I had some example commands to color in.
naibafoabout 8 years ago
Cute.
9gunpiabout 8 years ago
Explaining weird solutions with cute explanations is cute.