Post

Linux - SELinux

SELinux

[toc]

intro

ref https://cn.linux.vbird.org/linux_basic/0440processcontrol_5.php

MAC

  • deny by Default
  • log everything
  • only allow exceptions one at a time

Screen Shot 2020-04-12 at 21.58.47

Screen Shot 2020-04-12 at 21.59.28

Screen Shot 2020-04-12 at 22.00.47

.

This post is licensed under CC BY 4.0 by the author.

Comments powered by Disqus.