Protecting Confidential Files Using SE-Linux

A mandatory access control system, such as SE-Linux, is able to protect a computer system containing files and confidential data. Is not an easy task to manage a system protected with SE-Linux as not only it requires strong skills on Unix/Linux, but also high skills on security, mandatory access control systems and how SE-Linux works in deep. Most of the time, however, such level of security is not required and is difficult to find such high-level skills. This paper, based on a real case, wants to demonstrate that is possible to mediate between a high security environment and a traditional Unix system administration techniques.