Reference guides for SELinux concepts, tools, and comparisons. Use these alongside the levels or as standalone references.
Complete guide to managing SELinux booleans. Learn getsebool, setsebool, and the most important booleans for web servers, file sharing, and network services.
When does type enforcement win over path-based access control? A practical comparison of the two major Linux MAC systems with real-world scenarios.
Attackers rename and relocate binaries to dodge path-based rules. How SELinux type enforcement holds where AppArmor's path model slips, and the gap where even SELinux stops watching.
What mandatory access control is, how it differs from DAC, the formal security models behind it (Bell-LaPadula, Biba, Type Enforcement), and the Linux implementations that use it.
A weekend side quest. Mount a host directory into a rootless Podman container, watch container_t get denied, and learn to read the type and MCS categories that explain why. Three fixes, ranked.