

The SELinux subsystem in the kernel is driven by a security policy which is controlled by the administrator and loaded at boot. SELinux is a Linux Security Module (LSM) that is built into the Linux kernel. SELinux policy rules define how processes interact with files, as well as how processes interact with each other. SELinux fundamentally answers the question: "May do to ", for example: "May a web server access files in users' home directories?". Security Enhanced Linux (SELinux) provides an additional layer of system security.

It is a project of the United States National Security Agency (NSA) and the SELinux community. x kernel using the Linux Security Modules (LSM). Security-Enhanced Linux (SELinux) is a security architecture integrated into the 2.6.
