What is SE Linux?

Security-Enhanced Linux (SELinux) is a Linux kernel security module that provides a mechanism for supporting access control security policies, including mandatory access controls (MAC). It is commonly used to enforce least privilege, limiting the damage that can be caused by malicious or flawed software. SELinux defines a policy that dictates how processes can interact with files, directories, and other processes, providing an extra layer of security beyond traditional discretionary access control (DAC).