Security-Enhanced Linux (SELinux) is a Linux variant that implements a variety of security policies, including U.S. Department of Defense style mandatory access controls, through the use of
Linux Security Modules (LSM) in the
Linux kernel. It is not a
Linux distribution, but rather a set of modifications that can be applied to
Unix-like operating systems, such as
Linux and
BSD. Its architecture strives to streamline the volume of software charged with security policy enforcement, which is closely aligned with the
TCSEC (Orange Book) requirement for TCB minimization (applicable to evaluation classes B3 and A1) but is quite unrelated to the
least privilege requirement (B2, B3, A1) as is often claimed. The germinal concepts underlying SELinux can be attributed to the U.S.
National Security Agency's Peter Loscocco.
See more at Wikipedia.org...
Free Download Now!
