1.6.1.2 Ensure the SELinux state is enforcing - sestatus

Information

Set SELinux to enable when the system is booted.
Rationale:
SELinux must be enabled at boot time in to ensure that the controls it provides are in effect at all times.

Solution

Edit the /etc/selinux/configfile to set the SELINUX parameter:
SELINUX=enforcing

See Also

https://workbench.cisecurity.org/files/2242

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CSCv7|14.6

Plugin: Unix

Control ID: d0b9f4f5be1a70c94867f62869efa37a663a9ea98b45ec2f981281ec55a78baa