https://wassimaouadi.com/tags/selinux/ Recent content in Selinux on Hugo en Tue, 28 Jul 2026 21:31:13 +0200 https://wassimaouadi.com/posts/linuxselinux/ Tue, 28 Jul 2026 21:31:13 +0200 https://wassimaouadi.com/posts/linuxselinux/ <p>SELinux is an implementation of the Mandatory Access Control security model in the Linux kernel. It bears more weight than the Discretionary Access Control security model, implemented as the Unix-based file permissions (ugo, rwx); To illustrate the power of SELinux, a Linux user, even the <em>root</em> account, gets denied access to his own files if the result of the SELinux authorization chain is a deny.</p> <p>SELinux assigns a context (aka label) to every Linux user, process, file, directory, port, socket, hardware device, etc. These are considered as either subjects (Linux users and processes) or objects (files, directories, ports, &hellip;).</p>