mediumaccess-controlverified ✓rollback-safe
Ensure SELinux is installed
selinux-installed · RHEL ≥ 8 · 1 impl
Description
The libselinux package must be installed so the system has the userspace library and tooling required to load and enforce an SELinux policy.
Rationale
SELinux provides mandatory access control that confines processes to the minimum privileges they require. Without libselinux present the kernel cannot apply an SELinux policy, so the confinement the other SELinux controls assume is unavailable. This checks that the package is installed, independent of the runtime enforcing state verified by selinux-not-disabled and selinux-enforcing.
Check → Remediate
Checkpackage_state
- name:
- libselinux
- state:
- present
Remediatepackage_present
- name:
- libselinux
Framework references
CIS
rhel9 1.3.1.1rhel8 1.3.1.1rhel10 1.3.1.1
NIST 800-53
AC-3AC-6
Live verification
rhel9:check
#selinux#mandatory-access-control#packages