Detections
Analytics

1.6.1.2 Ensure the SELinux state is enforcing

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

SELinux must be enabled at boot time in to ensure that the controls it provides are in effect at all times.

Solution

Edit the /etc/selinux/config file to set the SELINUX parameter: SELINUX=enforcing

See Also

https://workbench.cisecurity.org/files/1859

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3(3), CSCv6|14.4

Plugin: Unix

Control ID: 08bd0a380c4c0329b3db79fa8adb65bc07decce63bcd48ccf022c6377c35c508