Linux Security Essay

1305 Words Sep 21st, 2013 6 Pages
The Linux security technologies I researched are SELinux, chroot jail and iptables.
SELinux (Security-Enhanced Linux) is a Linux feature that provides the mechanism for supporting access control security policies, including United States Department of Defense-style mandatory access controls, through the use of Linux Security Modules (LSM) in the Linux kernel. It is not a Linux distribution, but rather a set of kernel modifications and user-space tools that can be added to various Linux distributions. Its architecture strives to separate enforcement of security decisions from the security policy itself and streamlines the volume of software charged with security policy enforcement. The key concepts underlying SELinux can be traced to
…show more content…
However, it is mostly used to confine daemons[citation needed] like database engines or web servers that have more clearly-defined data access and activity rights. This limits potential harm from a confined daemon that becomes compromised. Ordinary user-processes often run in the unconfined domain, not restricted by SELinux but still restricted by the classic Linux access rights. chroot jail - A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children. A

Related Documents