如果你只是想维护或操作 RHEL（克隆版）上现有的东西：https://docs.redhat.com/en/documentation/red_hat_enterprise_... 如果你想深入研究：Sven Vermeulen 写的《SELinux System Administration》。
If you just want to maintain or operate what's already there on a RHEL (clone): https://docs.redhat.com/en/documentation/red_hat_enterprise_... If you want to dive deeper: "SELinux System Administration" by Sven Vermeulen.
我绝不是在为文档的糟糕现状开脱，但对我来说，理解实际策略的一个良好起点是《SELinux System Administration》（ISBN 978-1-80020-147-7）。它虽然不能一路带你搞定通过 Ansible 或 RPM 包来应用策略，但绝对让我不再盲目地乱跑 audit2allow 命令，而是转向了更全局的视角……
Not excusing that state of documentation by any means, but a good starting point for understanding the actual policy for me was "SELinux System Administration" (ISBN 978-1-80020-147-7). It won't carry you all the way to applying policies via Ansible or RPM packages, but definitely took me from running random audit2allow commands to taking a more holistic view…
我在这个帖子的其他地方也提过，我（好吧，其实是我雇主）买了一本讲 SELinux System Administration 的书（书名就叫这个），对我来说正好起到了这个作用。它不会让你立刻成为专家，但它能把整个过程里那些玄学、不可名状的东西剥离掉，你能懂我意思吧。而且如果你跳过……的话，它其实相当简短
I mentioned elsewhere in the thread, I (well, my employer) picked up a copy of a book on SELinux System Administration (that's the title) and it has served just this function for me. It won't make you an expert but it takes the voodoo out of the whole process, if that makes sense. And it is reasonably short if you skip…
如果你只是想维护或操作 RHEL（克隆版）上现有的东西：https://docs.redhat.com/en/documentation/red_hat_enterprise_... 如果你想深入研究：Sven Vermeulen 写的《SELinux System Administration》。
If you just want to maintain or operate what's already there on a RHEL (clone): https://docs.redhat.com/en/documentation/red_hat_enterprise_... If you want to dive deeper: "SELinux System Administration" by Sven Vermeulen.
我绝不是在为文档的糟糕现状开脱，但对我来说，理解实际策略的一个良好起点是《SELinux System Administration》（ISBN 978-1-80020-147-7）。它虽然不能一路带你搞定通过 Ansible 或 RPM 包来应用策略，但绝对让我不再盲目地乱跑 audit2allow 命令，而是转向了更全局的视角……
Not excusing that state of documentation by any means, but a good starting point for understanding the actual policy for me was "SELinux System Administration" (ISBN 978-1-80020-147-7). It won't carry you all the way to applying policies via Ansible or RPM packages, but definitely took me from running random audit2allow commands to taking a more holistic view…
我在这个帖子的其他地方也提过，我（好吧，其实是我雇主）买了一本讲 SELinux System Administration 的书（书名就叫这个），对我来说正好起到了这个作用。它不会让你立刻成为专家，但它能把整个过程里那些玄学、不可名状的东西剥离掉，你能懂我意思吧。而且如果你跳过……的话，它其实相当简短
I mentioned elsewhere in the thread, I (well, my employer) picked up a copy of a book on SELinux System Administration (that's the title) and it has served just this function for me. It won't make you an expert but it takes the voodoo out of the whole process, if that makes sense. And it is reasonably short if you skip…