Detections
Analytics

1.6.1.1 Ensure SELinux is not disabled in bootloader configuration - selinux=0

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

SELinux must be enabled at boot time in your grub configuration to ensure that the controls it provides are not overridden.

Solution

Edit /boot/grub/grub.conf and remove all instances of selinux=0 and enforcing=0 on all kernel lines.

See Also

https://workbench.cisecurity.org/files/1857

Item Details

Category: ACCESS CONTROL, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|AC-3(3), 800-53|SI-7(9), CSCv6|14.4

Plugin: Unix

Control ID: 620e54685939fb4c917d2597efe806bd86328ce33aec552ca8b87493b0993854