SELinux (short for Security-Enhanced Linux), is a flexible Mandatory Access Control (MAC) devised to overcome the limitations of standard ugo/rwx permissions and ACLs.
Implementing Mandatory Access Control with SELinux
Getting ready
In most Linux distributions, such as CentOS and Redhat, SELinux is by default incorporated in the kernel. However, if we are working on any other distribution, such as Debian, we may have to install and configure SELinux on the system:
- First, we have to get the basic set of SELinux utilities and default policies by running the following command:
- Once the installation has completed, run the following command to configure GRUB and PAM, and to create /autorelabel:
After this, you have to reboot...