Tresys Brickwall 1.1

Tresys Brickwall software makes it easy to manage the power of SELinux. Tresys Brickwall is built on an enhanced version of the Reference Policy that "targets" network facing applications for containment. SELinux forms a firewall around each application, protecting applications from each other and preventing an application from damaging the kernel. Tresys Brickwall provides an intuitive graphical user interface (GUI) that allows administrators to configure access to network resources at the application level. Security options (SELinux Booleans) can also be set on a per-application basis. Advanced users can even include raw SELinux policy for additional customization.

The Tresys Brickwall Professional and Enterprise Editions add targets for several applications not covered by the standard Reference Policy, and they allow administrators to define custom targets for applications not in the built-in target list. These editions also allow administrators to extend targets file access permissions.

The Tresys Brickwall Enterprise Edition adds a first-ever network management capability to SELinux. A central Tresys Enterprise Manager securely manages the configuration for all of the SELinux machines across an enterprise. Groups of client machines can be defined and a configuration can be managed and applied to all of the machines in that group. The Tresys Enterprise Manager also works with Tresys Razor™ products to manage enterprise applications like IBMs WebSphere and DB2.