<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:media="http://search.yahoo.com/mrss/"><channel><title>SELinux on Shaowen Chen's Website</title><link>https://www.chenshaowen.com/en/tags/selinux/</link><description>Recent content in SELinux on Shaowen Chen's Website</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>&amp;copy;2016 - {year}, All Rights Reserved.</copyright><lastBuildDate>Fri, 21 Sep 2018 00:00:00 +0000</lastBuildDate><sy:updatePeriod>weekly</sy:updatePeriod><atom:link href="https://www.chenshaowen.com/en/tags/selinux/atom.xml" rel="self" type="application/rss+xml"/><item><title>SELinux and iptables</title><link>https://www.chenshaowen.com/en/blog/selinux-and-iptables-on-linux.html</link><pubDate>Fri, 21 Sep 2018 00:00:00 +0000</pubDate><atom:modified>Fri, 21 Sep 2018 00:00:00 +0000</atom:modified><guid>https://www.chenshaowen.com/en/blog/selinux-and-iptables-on-linux.html</guid><description>While working on servers recently, I ran into a few concepts I wasn&amp;rsquo;t clear about, so I looked up some references and organized them as follows. 1. The BLP Security Model The model divides the entities in an information system into two parts: Subject: the entity performing the operations, such</description><dc:creator>微信公众号</dc:creator><category>Security</category><category>Linux</category><category>iptables</category><category>SELinux</category><category>Operations</category></item></channel></rss>