SELinux (Security-Enhanced Linux) is an implementation of a flexible mandatory, role-based access control architecture on Linux. It is primarily used to confine system processes.

learn more… | top users | synonyms

6
votes
1answer
537 views

How does SELinux affect the Linux Kernel networking stack?

I'm interested in how SELinux effects the processing of packets through the networking stack. I've found the following questions and answers: Network policies under AppArmor/SELinux Filtering ...
1
vote
1answer
44 views

Defense-In-Depth With Common Security Controls

Many operating systems implement system capabilities, Posix access controls (DAC/ACLs) and mandatory access controls (SELinux), each using different underlying security controls to provide individual ...
0
votes
0answers
5 views

SELinux boolean secure_policy_insmod

How does SELinux enable the boolean secure_mode_insmod to control whether or not kernel modules can be loaded or removed? Can it be modified to block the removal of only certain kernel modules?
0
votes
0answers
19 views

How to know if setroubleshoot is running in Centos 7.2

I have tried systemctl status setroubleshootd.service, but I get ● setroubleshootd.service Loaded: not-found (Reason: No such file or directory) Active: inactive (dead) Neither does setroubleshootd ...
0
votes
0answers
28 views

Is it possible to write an SEAndroid permission that enables only one app (subject) to access a device (object)?

We're interested in writing an SELinux policy for an Android build that enables a device (e.g. /dev/target) to be accessed by a single app and only that app. The app is a user-space app that's ...