How To Secure Linux Servers With Selinux
By processing only relevant files that the administrator has already approved, MAC is a higher level of access control than standard discretionary access control (DAC) and protects against system security breaches. Red Hat and the National Security Agency collaborated to create SELinux, which was made public for the first time as a result. As new versions of Linux are introduced, SELinux is periodically updated and expanded. To spread out the degrees of protection and avoid a complete security breach, the SELinux kernel splits policy and decisions within the kernel....