1.6.1.2 Ensure the SELinux state is enforcing - /etc/selinux/config

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Set SELinux to enable when the system is booted.
Rationale:
SELinux must be enabled at boot time in to ensure that the controls it provides are in effect at all times.

Solution

Edit the /etc/selinux/configfile to set the SELINUX parameter:
SELINUX=enforcing

See Also

https://workbench.cisecurity.org/files/2429

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3(3), CSCv6|14.4, CSCv7|14.6

Plugin: Unix

Control ID: e44f79336bd515a21d9d95fb2a5fc5e1226a65bdfc933dc40b22d08984acae11