Security-Enhanced Linux (SELinux)

Updated 31 Jul 2026

•
def
- •
  a set of security patches for the Linux kernel that adds Mandatory Access Control (MAC) to Linux, which traditionally uses Discretionary Access Control (DAC)
•
benefit
- •
  limits application access via least privilege, so a potential breach has limited scope; open source, and already included as an option in many Linux distributions
•
related
- •
  Mandatory Access Control (MAC)
•
cards
- •
  WHat access control model does SELinux add to Linux, replacing the traditional one?
  - •
    Adds Mandatory Access Control (MAC), replacing Linux's traditional Discretionary Access Control (DAC)

Linked references 2