SELinux at Heart of New Hacker-Resistant Infrastructure
By
Paul Shread
The ecosystem is based on Security-Enhanced Linux (SELinux), but it adds role-based access control with a policy for each role, so no one can get to the system root and the root can’t see user data.