Detections
Analytics

1.6.1.2 Ensure the SELinux state is enforcing

Information

SELinux must be enabled at boot time in to ensure that the controls it provides are in effect
at all times.

Solution

Edit the /etc/selinux/config file to set the SELINUX parameter - SELINUX=enforcing

See Also

https://workbench.cisecurity.org/files/1863

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3(3), CSCv6|14.4

Plugin: Unix

Control ID: d19ad938668e6c9ce04ed19423156fed3e5417e0ca55c84f2c2550dee7468f6d