1.6.1.2 Ensure the SELinux state is enforcing - /etc/selinux/config

Information

Set SELinux to enable when the system is booted.

Rationale:

SELinux must be enabled at boot time in to ensure that the controls it provides are in effect at all times.

Solution

Edit the /etc/selinux/config file to set the SELINUX parameter:

SELINUX=enforcing

See Also

https://workbench.cisecurity.org/files/3399

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv6|14.4, CSCv7|14.6

Plugin: Unix

Control ID: a99df847a9076db3e1ef85add7bb8195f297e70ddbe53e8464c3f5ac85aba531