1.7.1.4 Ensure the SELinux state is enforcing

Information

Set SELinux to enable when the system is booted.
Rationale:
SELinux must be enabled at boot time to ensure that the controls it provides are in effect at all times.

Solution

Edit the /etc/selinux/config file to set the SELINUX parameter:
SELINUX=enforcing

See Also

https://workbench.cisecurity.org/files/2485

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3(3), CSCv7|14.6

Plugin: Unix

Control ID: 2916c81a96ef641f4dd602087cc5532eb96841a931ccbfdd0f62f47f53d7dca8