Introduction
SELinux is a Linux kernel module that allows supporting mandatory access control (MAC) security policies. The Red Hat implementation of SELinux combines role-based access control (RBAC) with type enforcement (TE). Optionally, multilevel security (MLS) is also available but isn't widely used as it implements fewer policies than the default Red Hat SELinux policies.
SELinux is enabled by default in RHEL 7 and supported for all software packaged by Red Hat.
The recipes presented in this chapter will not only provide you with a solid base to troubleshoot SELinux issues and fix them, but also a peek into how to create your own SELinux policies.
