TOMOYO Linux 2.3.x : The Official Guide

Welcome to the official documentation of TOMOYO Linux 2.3.x branch. Get started now!

Core Topics

Chapter 1: Introduction

• 1.1. Introduction to this guide
• 1.2. Typography

Chapter 2: Why do I need TOMOYO Linux?

• 2.1. What is TOMOYO Linux?
• 2.2. What is Mandatory Access Control?
• 2.3. How can TOMOYO Linux help me?

Chapter 3: How do I install TOMOYO Linux?

• 3.1. Install the kernel
  
  • 3.1.1. Determine if your kernel has TOMOYO Linux enabled
  • 3.1.2. Install dependencies
  • 3.1.3. Download the kernel
  • 3.1.4. Configure the kernel
  • 3.1.5. Compile and install the kernel
• 3.2. Install the userspace tools
  
  • 3.2.1. Determine if binary packages are provided
  • 3.2.2. Install tools from source
• 3.3. Initialize configuration
• 3.4. Configure bootloader
• 3.5. Rebooting your system
• 3.6. How do I disable/uninstall TOMOYO Linux?

Chapter 4: How does TOMOYO Linux work?

• 4.1. Understanding domains
• 4.2. View domains with the policy editor
• 4.3. Understanding profiles
• 4.4. Understanding domain policy
• 4.5. Understanding exception policy

Chapter 5: How do I manage domains?

• 5.1. Domain creation
• 5.2. Management of domain transitions
  
  • 5.2.1. initialize_domain
  • 5.2.2. no_initialize_domain
  • 5.2.3. keep_domain
  • 5.2.4. no_keep_domain
• 5.3. Switching to learning mode
• 5.4. Gathering necessary permissions
• 5.5. Saving permissions to disk
• 5.6. Managing memory usage

Chapter 6: How do I develop policy?

• 6.1. Patterning temporary files
• 6.2. Patterning file access permissions
• 6.3. Patterning numeric permissions
• 6.4. Reviewing gathered permissions

Chapter 7: How do I enforce policy?

• 7.1. Enabling enforcing mode
• 7.2. Notification daemon
• 7.3. Handling policy violations in real-time
  
  • 7.3.1. Example usage of "tomoyo-queryd"
  • 7.3.2. Example output from "tomoyo-queryd"
• 7.4. Enabling enforcing mode for all domains
• 7.5. Beyond the core topics

Advanced Topics

Chapter 8: Interface permissions

• 8.1. Register applications
• 8.2. Managing as non-root user

Chapter 9: Advanced profile management

• 9.1. Profile initialization
• 9.2. Profile syntax
  
  • 9.2.1. Fields
  • 9.2.2. The CONFIG field
  • 9.2.3. The PREFERENCE field

Chapter 10: Reinforced authentication

• 10.1. Illegal SSH logins
• 10.2. Splitting root permissions
• 10.3. Example authentication programs

Appendix

Appendix A: The userspace tools

Appendix B: Policy specification

Appendix C: How to use the policy editor

Appendix D: Protecting SFTP service