1.7.1.4 Ensure the SELinux state is enforcing - sestatus

Information

Set SELinux to enable when the system is booted. SELinux must be enabled at boot time to ensure that the controls it provides are in effect at all times.

Solution

Edit the /etc/selinux/config file to set the SELINUX parameter: SELINUX=enforcing

See Also

https://workbench.cisecurity.org/files/2608

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CSCv7|14.6

Plugin: Unix

Control ID: 29cf9cac6bd67ac16e3667c655d5ebd6e49f60c506c17300f1c2607affb9dcbd