Detections
Analytics

1.6.2.2 Ensure the SELinux state is enforcing

Information

Set SELinux to enable when the system is booted.

Rationale:

SELinux must be enabled at boot time to ensure that the controls it provides are in effect at
all times.

Solution

Edit the /etc/selinux/config file to set the SELINUX parameter:

SELINUX=enforcing

See Also

https://workbench.cisecurity.org/files/2420

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CSCv6|14.4, CSCv7|14.6

Plugin: Unix

Control ID: 54cda7b4ff138a9f326fad2e0dbbacd1eb2ac1ceb34ce111ac29cf0ade51aa25