1.6.3 Ensure SELinux or AppArmor are installed

Information

SELinux and AppArmor provide Mandatory Access Controls.

Rationale:

Without a Mandatory Access Control system installed only the default Discretionary Access Control system will be available.

Solution

Run one of the following commands to install SELinux or apparmor:

# apt-get install selinux-basics selinux-policy-default
# apt-get install apparmor apparmor-utils

See Also

https://workbench.cisecurity.org/files/2619

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CSCv7|14.6

Plugin: Unix

Control ID: b6c4109010f2d7a6cc9327a73b35b01d2638d1e19d5a1e54f7b53b6762bf5ba1