Articles & Reviews
News Archive
Forums
Premium
Contact
Categories

Computers Display Drivers Graphics Cards Linux Gaming Memory Motherboards Processors Software Storage Operating Systems Peripherals

SELinux For 5.6 Kernel Sees Largest Change Set In A While

Written by Michael Larabel in Linux Security on 27 January 2020 at 05:59 PM EST. 9 Comments

SELinux maintainer Paul Moore sent in the Security Enhanced Linux updates for the 5.6 merge window, which amounts to "one of the bigger SELinux pull requests in recent years."

Among the changes are deprecating CONFIG_SECURITY_SELINUX_DISABLE (the option allowing run-time disabling of SELinux via a sysfs node), SELinux controls for the new kernel lockdown functionality, an SELinux control for move_mount, improved SELinux security label data lookups, enabling SELinux per-file labeling for BinderFS, and various fixes and other enhancements.

More details on the Security Enhanced Linux changes for the 5.6 kernel via this pull request.

9 Comments

Linux To Allow Disabling TPM PCR Integrity Protection Due To Performance Bottleneck

OpenPaX Announced As "Open-Source Alternative To GrSecurity" With Free Kernel Patch

Unauthenticated RCE Flaw With CVSS 9.9 Rating For Linux Systems Affects CUPS

Landlock Sandboxing Now Supports More Controls Around Unix Sockets

Linux 6.12 Adds Build Options For Greater Control Over CPU Security Mitigations

About The Author

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com.