Detections
Analytics

1.6.1.3 Ensure SELinux policy is configured - /etc/selinux/config

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Configure SELinux to meet or exceed the default targeted policy, which constrains daemons and system software only.

Note: If your organization requires stricter policies, ensure that they are set in the /etc/selinux/config file.

Rationale:

Security configuration requirements vary from site to site. Some sites may mandate a policy that is stricter than the default policy, which is perfectly acceptable. This item is intended to ensure that at least the default recommendations are met.

Solution

Edit the /etc/selinux/config file to set the SELINUXTYPE parameter:

SELINUXTYPE=targeted

See Also

https://workbench.cisecurity.org/files/3397

Item Details

References: CSCv7|14.6

Plugin: Unix

Control ID: 57f82a998ce6c3352d7cf7d8c7eb768c20230fb8f3b4f9765c038003cf39cbaf