Improve Security with SELinux
If you need a secure solution for your Linux system, then SELinux may be just right for you. SELinux can be referred to as an implementation of the FLASK security architecture. FLASK (Flux Advanced Security Kernel) is aimed at securing operating systems and is a joint venture between the National Security Agency (NSA) in the United States, NAI Labs, the Security Computing Cooperation and the MITRE Corporation. Rather than rely on DAC (Discretionary Access Control), SELinux provides a sturdy mechanism for which to enforce Mandatory Access Controls (MAC) to improve security.
This chapter provides an introduction ...