15.3. SELinux Introduction

1, Selinux:selinux-nsa security-enhanced Linux (selinux).

Work with the kernel.

2. Linux legacy security Model: DAC, autonomous access control

SELinux Security Model: MAC (mandatory access control)

3, SELinux mode of operation: (there are two types)

Strict: strict level, each process receives SELinux control

Targeted: Only a limited number of processes are controlled by selinux, only the processes that are vulnerable to intrusion are monitored

4, SELinux working methods: ls-z, PS auxz

#ls-z//SELinux label for display files

Such as:

[Email protected] ~]# ls-z

-RW-------. Root root System_u:object_r:admin_home_t:s0 anaconda-ks.cfg

Drwxr-xr-x. Root root Unconfined_u:object_r:admin_home_t:s0 Desktop

Drwxr-xr-x. Root root Unconfined_u:object_r:admin_home_t:s0 Documents

#ps AUXZ//Displays the SELinux feature.

5.

15.3. SELinux Introduction