Profile My skills Saved Collections Edit profile Submit a skill

CIS Ubuntu 14.04 LTS - 1.6.1.2 Ensure the SELinux state is enforcing

Verify that SELinux is set to enforcing mode for mandatory access control

cyberstrikeus Updated
Coding & Dev Tools

File contents

1.6.1.2 Ensure the SELinux state is enforcing (Scored)

Profile Applicability

  • Level 2 - Server
  • Level 2 - Workstation

Description

Set SELinux to enable when the system is booted.

Rationale

SELinux must be enabled at boot time in to ensure that the controls it provides are in effect at all times.

Audit Procedure

Run the following commands and ensure output matches:

grep SELINUX=enforcing /etc/selinux/config
sestatus

Expected Result

SELINUX=enforcing

SELinux status: enabled
Current mode: enforcing
Mode from config file: enforcing

Remediation

Edit the /etc/selinux/config file to set the SELINUX parameter:

SELINUX=enforcing

Default Value

Not applicable.

References

  • CIS Controls: 14.4 Protect Information With Access Control Lists

Profile

  • Level 2 - Server
  • Level 2 - Workstation

cyberstrikeus/cyberstrike/tree/main/.cyberstrike/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-linux-14-04-lts-benchmark-v2/cis-ubuntu1404-v210-1-6-1-2 commit a25c1677fb

Browse category

Frequently asked questions

npx skillmds@latest add cyberstrikeus/cis-ubuntu-14-04-lts-1-6-1-2-ensure-the-selinux-state-is-enf