Detections
Analytics

1.6.1.1 Ensure SELinux is not disabled in bootloader configuration - enforcing=0

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

SELinux must be enabled at boot time in your grub configuration to ensure that the controls it provides are not overridden.

Solution

Edit /boot/grub/grub.conf and remove all instances of selinux=0 and enforcing=0 on all kernel lines.

See Also

https://workbench.cisecurity.org/files/1861

Item Details

Category: ACCESS CONTROL, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|AC-3(3), 800-53|SI-7(9), CSCv6|14.4

Plugin: Unix

Control ID: 9d7f05f61ec07bd629b3d7797c14d0d97ed7aac8a7c8f9e27002621992940a38