SELinux

TODO.

Superset of capabilities: https://lwn.net/Articles/79553/

https://en.wikipedia.org/wiki/Security-Enhanced_Linux

sudo apt-get install attr setools selinux-utils

man capabilities

Disabled by default on Ubuntu: https://askubuntu.com/questions/481293/selinux-implementation-in-ubuntu

sesearch

TODO.

getenforce

setenforce

Check if enabled:

getenforce

Enable:

sudo setenforce 1

TODO: goes through which kernel interface?

getcap

getfattr

TODO.