3 ms·
SELinux doesn’t let root just do whatever it wants.
by beervirus 6y ago
SELinux doesn’t let root just do whatever it wants.
- giancarlostoro 6y agoIt's typically not enabled by default though, but I suppose that's a fair point.
- acdha 6y agoThat very much depends on what distribution you use. The Fedora/CentOS/RHEL world has had SELinux enabled by default for years. The Debian world has not but AppArmor is pretty popular there and while that's a fairly different system it hits many of the same sandboxing points. Beyond the default configuration, anyone who is following a hardening standard like CIS is going to have SELinux enabled, too.