1.6.3 Ensure SELinux or AppArmor are installed

Information

SELinux and AppArmor provide Mandatory Access Controls.

Rationale:

Without a Mandatory Access Control system installed only the default Discretionary Access Control system will be available.

Solution

Install SELinux or apparmor using one of the following commands:

# zypper install libselinux1
# zypper install libapparmor1 apparmor-utils

The previous commands install SELinux, use the appropriate package if AppArmor is desired.

See Also

https://workbench.cisecurity.org/files/3738

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: Unix

Control ID: 87cb02c441c8efb67f924ac728b9bf51354db696e4585a4001e065aad3f75e6b