Skip to content

Glossary: Endpoint, Application and Email Security

SELinux (Security-enhanced Linux)

Also written: Security-enhanced Linux

A Linux kernel feature, first developed by the NSA, that adds mandatory access control. It labels every process and file and denies anything the policy doesn't allow, so a hijacked web server stays confined.

Where the book teaches it

Related terms

MAC (mandatory access control)SELinux contexttype enforcementSELinux modesAVC (access vector cache)