Redhat: SELINUX basic

SELinux Status

SELinux can have one of three states. The state can be changed in /etc/selinx/conf file

Disabled

SELinux is not running. This means that your system has less protection against attacks.

Enforcing

SELinux is running and is protecting the system from attacks

Permissive

The permissive mode of SELinux, logs violations, but does NOT prevent them. The permissive mode has two modes of operation.

The target mode is the default. Targeted operation allows the administrator to customize what SELinux protehcts.

The MLS mode uses allows files to be protected based on security level with the levels ranging from C0 to C3. Level C3 is Top Secret. While currently on three levels of security are supported, there are level up to C1023 possible.