Articles

SELinux – How to confine a Tomcat application on RHEL6 / CentOS6 – part 2

Part 1 is here. Another method of confining Tomcat is to create a completely new domain in which your application, as well as Tomcat and Java, will be running. Let's create a new domain by inheriting it from the tomcat_t domain. In the…

SELinux – How to confine a Tomcat application on RHEL6 / CentOS6 – part 1

This article will explain how to use SELinux to confine a Tomcat application on RHEL6 / CentOS6. By default, Tomcat runs as tomcat_t, which is an unconfined type. This is difficult to find out, because the documentation is scarce on the different…

On Open Source and Security

We provide Linux and Open Source software consulting.  Sometimes, a potential client tells us "we don't use Open Source software because security is important for us". The proprietary industry has been spreading FUD claims on Open Source…