Selinux

selinux policy analysis

dnf install setools-console
seinfo

DAC and MAC

• Discretionary access control (DAC)
  • Traditional file/process access rights
• Mandatory access control (MAC)
  • Selinux
• See: http://csrc.nist.gov/publications/history/dod85.pdf