1.6.1.2 Ensure the SELinux state is enforcing - sestatus

Information

Set SELinux to enable when the system is booted.

Rationale:

SELinux must be enabled at boot time in to ensure that the controls it provides are in effect at all times.

Solution

Edit the /etc/selinux/config file to set the SELINUX parameter:

SELINUX=enforcing

See Also

https://workbench.cisecurity.org/files/3399

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv6|14.4, CSCv7|14.6

Plugin: Unix

Control ID: e44f79336bd515a21d9d95fb2a5fc5e1226a65bdfc933dc40b22d08984acae11