Tips for Taming SELinux

“There is a lot of (mostly uninformed) buzz around SELinux
(Security Enhanced Linux); it is touted as doing all kinds of
wonderful things that it probably doesn’t do. It’s not a good idea
to leap into implementing a complex security application like
SELinux without understanding what it’s for and how it works, so
we’re going to start with the basics. Then we’ll look at how to use
it, and actually understand what we’re doing.

“SELinux began as a research project by the NSA (National
Security Administration). The old model of reacting only to known
threats has a glaring, obvious weakness: You’re going to get beat
up a lot. The idea behind SELinux is to protect a system from the
unknown, and to close the door on zero-day exploits…”

Complete Story