“Operating system security revolves around controlling access.
Linux distributions subscribe to the Discretionary Access Control
(DAC) mechanism that lets resource owners decide who gets to access
the resource and how. People soon realized that DAC is not an ideal
solution, as it gives applications the same privileges of the user
running them. One compromised application running as root
effectively compromises the full system. This led security experts
to develop Mandatory Access Control (MAC), which grants access to
resources as defined by a security policy, regardless of the user
running the application. The Security Enhanced Linux (SELinux)
project is the first mainstream implementation of MAC.“The benefit of SELinux is twofold. First, it replaces the
user-based model with a policy-centric model…”
LinuxToday is a trusted, contributor-driven news resource supporting all types of Linux users. Our thriving international community engages with us through social media and frequent content contributions aimed at solving problems ranging from personal computing to enterprise-level IT operations. LinuxToday serves as a home for a community that struggles to find comparable information elsewhere on the web.
Property of TechnologyAdvice. © 2025 TechnologyAdvice. All Rights Reserved
Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.