Security-Enhanced Linux (SELinux) is a Linux kernel security module that provides a mechanism for supporting access control security policies, including mandatory access controls (MAC). SELinux is a set of kernel modifications and user-space tools that have been added to various Linux distributions. Its architecture strives to separate enforcement of security decisions from the security policy, and streamlines the amount of software involved with security policy enforcement. The key concepts underlying SELinux can be traced to several earlier projects by the United States National Security Agency (NSA). Overview The NSA Security-enhanced Linux Team describes NSA SELinux as a set of patches to the Linux kernel and utilities to provide a strong, flexible, mandatory access control (MAC) architecture into the major subsystems of the kernel. It provides an enhanced mechanism to enforce the separation of information based on confidentiality and integrity requirements, which allows threats of tampering, and bypassing of application security mechanisms, to be addressed and enables the confinement of damage that can be
Secure-Enhanced Linux (SELinux) es un módulo de seguridad del núcleo de Linux que proporciona un mecanismo para apoyar políticas de seguridad de control de acceso, incluyendo controles de acceso obligatorio (MAC). SELinux es un conjunto de modificaciones del núcleo y herramientas de espacio de usuario que se han añadido a varias distribuciones de Linux. Su arquitectura se esfuerza por separar la ejecución de las decisiones de seguridad de la política de seguridad, y simplifica la cantidad de software involucrado con la ejecución de la política de seguridad. Los conceptos clave subyacentes a SELinux se pueden rastrear a varios proyectos anteriores por la Agencia de Seguridad Nacional (NSA).