Table of Contents

Security-Enhanced Linux (SELinux)

Return to AppArmor, SELinux, Linux Security Modules (LSM), Security, Linux, Linux Security, Linux Automation, Linux DevOps, Linux Networking, Linux Storage, CloudOps (Cloud Management), Kubernetes Admin, Red Hat Kubernetes OpenShift Administrator, Container Admin, Cloud Admin (AWS Admin, Azure Admin, GCP Admin), Red Hat Certified System Administrator (RHCSA), Red Hat Certified Engineer (RHCE - Ansible), SysAdmin, Linux Admin (Linux Management), Windows Admin (Windows Server Management), ServerAdmin, NetAdmin (Network management)

SELinux Project - SELinux is flexible Mandatory Access Control (MAC) for Linux

Snippet from Wikipedia: Security-Enhanced Linux

Security-Enhanced Linux (SELinux) is a Linux kernel security module that provides a mechanism for supporting access control security policies, including mandatory access controls (MAC).

SELinux is a set of kernel modifications and user-space tools that have been added to various Linux distributions. Its architecture strives to separate enforcement of security decisions from the security policy, and streamlines the amount of software involved with security policy enforcement. The key concepts underlying SELinux can be traced to several earlier projects by the United States National Security Agency (NSA).

Linux, Linux DevOps - Linux SRE - Linux CI/CD, Cloud Native Linux - Linux Microservices - Serverless Linux, Linux Security - Linux DevSecOps, Parallel Programming and Linux, Concurrency and Linux, Linux Databases, Linux Data Science, Linux Machine Learning, Linux Bibliography, Linux Courses, Linux Glossary, Awesome Linux, Linux GitHub, Linux Topics

Research More

Linux Research:

Security - Pentesting

Linux

Python Security

JVM Security - Java-Kotlin-Scala-Clojure - Android - Spring Boot

Security Tutorials

Support

Fair Use Sources

Fair Use Sources:

Linux:

Linux, kernel, systemd, init, GRUB (GRand Unified Bootloader), initramfs, ext4 (Fourth Extended Filesystem), XFS, Btrfs (B-Tree File System), zram, zswap, cgroups (Control Groups), namespaces, selinux (Security-Enhanced Linux), AppArmor, iptables, nftables, firewalld, auditd, journald, syslog, logrotate, dmesg, udev, eBPF (Extended Berkeley Packet Filter), KVM (Kernel-based Virtual Machine), QEMU (Quick Emulator), VirtIO, LXC (Linux Containers), Docker, Podman, CRI-O, Kubernetes Integration, etcd, Linux Control Groups, LXD (Linux Daemon), Snap, Flatpak, AppImage, RPM (Red Hat Package Manager), dpkg (Debian Package Manager), APT (Advanced Package Tool), YUM (Yellowdog Updater, Modified), DNF (Dandified YUM), Pacman, Zypper, Portage, emerge, Nix, pkg-config, ldconfig, make, cmake, autoconf, automake, configure, GCC (GNU Compiler Collection), Clang, glibc (GNU C Library), musl, libstdc++, libc, binutils, GNU Coreutils, Bash (Bourne Again Shell), Zsh (Z Shell), Fish Shell, dash, sh, SSH (Secure Shell), sshd (SSH Daemon), scp (Secure Copy), rsync, SCP (Secure Copy Protocol), wget, curl, ftp, sftp, TFTP (Trivial File Transfer Protocol), NFS (Network File System), CIFS (Common Internet File System), Samba, autofs, mount, umount, lsblk, blkid, parted, fdisk, gdisk, mkfs, fsck, tune2fs, xfs_repair, btrfs-progs, mdadm (Multiple Device Admin), RAID (Redundant Array of Independent Disks), LVM (Logical Volume Manager), thin provisioning, lvcreate, lvremove, vgcreate, vgremove, pvcreate, pvremove, multipath-tools, ISCSI (Internet Small Computer Systems Interface), nvme-cli, dm-crypt, cryptsetup, LUKS (Linux Unified Key Setup), dracut, GRUB Customizer, PXE (Preboot Execution Environment), tftpboot, Syslinux, LiveCD, LiveUSB, mkbootdisk, dd, cpio, tar, gzip, bzip2, xz, 7zip, zstd, rsyslog, sysctl, lsmod, modprobe, depmod, modinfo, insmod, rmmod, kmod, dkms (Dynamic Kernel Module Support), kernel tuning, kernel headers, kernel modules, patch, diff, strace, ltrace, ptrace, perf, htop, top, iotop, atop, vmstat, mpstat, sar, dstat, iostat, uptime, free, df, du, ps, pidstat, nice, renice, kill, pkill, killall, jobs, bg, fg, wait, nohup, screen, tmux, cron, crontab, at, anacron, systemctl, service, chkconfig, rc-update, update-rc.d, ntpd (Network Time Protocol Daemon), chronyd, hwclock, timedatectl, ntpdate, ufw (Uncomplicated Firewall), iptables-save, iptables-restore, fail2ban, denyhosts, tcp_wrappers, libcap, setcap, getcap, auditctl, ausearch, kernel parameters, boot parameters, sysfs, procfs, debugfs, tmpfs, ramfs, overlayfs, aufs, bind mounts, chroot, pivot_root, overlay2, network namespaces, bridge-utils, iproute2, ip, ifconfig, route, netstat, ss, arp, ping, traceroute, mtr, tcpdump, ngrep, nmap, arp-scan, ethtool, iwconfig, iw, wpa_supplicant, hostapd, dnsmasq, networkmanager, nmcli, nmtui, system-config-network, dhclient, dhcpd, isc-dhcp-server, bind9, named, unbound, nslookup, dig, resolvconf, iptables, nftables, firewalld, conntrack, ipset, snort, suricata, tcp_wrappers, rkhunter, chkrootkit, clamav, lynis, openvpn, strongswan, libreswan, openconnect, network namespaces, virtual ethernet, veth, tap interfaces, tun interfaces, vlan, bridge, brctl, ovs-vsctl, openvswitch, macvlan, ipvlan, bonding, teamd, network teaming, multipath, multipath-tools, route tables, ip rule, ip route, policy routing, qos, tc (Traffic Control), htb, fq_codel, cake, iptables NAT, iptables MASQUERADE, squid, socks5, privoxy, tor, iptables DNAT, iptables SNAT, iptables REDIRECT, conntrack, stateful firewall, stateless firewall, tcp_window_scaling, tcp_timestamps, tcp_sack, tcp_rmem, tcp_wmem, tcp_no_metrics_save, tcp_ecn, netem, ip6tables, ipset, ebtables, arptables, bridge-nf, br_netfilter, openvswitch, gre tunnels, ipip tunnels, vxlan, gretap, macsec, macvlan, ipvlan, wireguard, strongswan, libreswan, xfrm, ipsec, isakmpd, racoon, openswan, ikev2, ikev1, vpn tunnels, gre tunnels, vxlan tunnels, fou tunnels, ipip tunnels.

Linux Core Utilities commands - GNU Core Utilities command-line interface programs

This list should really only include standard universal commands that come with GNU Core Utilities.

Linux File system commands

Linux Text utilities:

Linux Shell utilities:

Unix Commands:

This should really only include standard universal commands that come with all Linux distributions adhering to the Single UNIX Specification.

Really this is “Unix programs”, since there are no commands in Unix, they are programs except for shell builtins.

Unix command-line interface programs and shell builtins:

Unix File system commands:

Unix process commands:

Unix user environment commands:

 [[env]]

Unix text processing commands:

Unix shell builtin commands:

 [[alias (command) ]] | [[ alias]]

Unix networking commands:

Note: Networking is not part of SUS

Unix network utility commands:

Unix searching commands:

Unix documentation commands:

Unix software development commands: Note: There are a huge number of Linux software development tools / Unix software development tools; this list should be restricted to ones that are standardized as part of Unix, i.e., those marked SD, CD], or FD (http://pubs.opengroup.org/onlinepubs/9699919799/help/codes.html) within the Unix/POSIX specifications

Unix miscellaneous commands:

See also

References

Linux Commands (ls, cd, pwd, cp, mv, rm, mkdir, rmdir, touch, cat, less, head, tail, grep, find, chmod, chown, chgrp, tar, gzip, gunzip, df, du, ps, top, kill, man, ssh, scp, rsync, vim, nano, sed, awk, ping, ifconfig, netstat, route, traceroute, dig), Linux Fundamentals, Linux Inventor: Linus Torvalds says “Linux sucks | Linux just sucks less.”, Linux Best Practices - Linux Anti-Patterns, Linux kernel, Linux commands-Linux Shells-Linux CLI-GNU-Linux GUI-X11, Linux DevOps-Linux development-Linux system programming-Bash-zsh-Linux API, Linux package managers, Linux configuration management (Ansible on Linux, Chef on Linux, Puppet on Linux, PowerShell on Linux), Linux Distros (RHEL-Rocky Linux-CentOS (CentOS Stream)-Oracle Linux-Fedora, Ubuntu-Debian-Linux Mint-Raspberry Pi OS-Kali Linux-Tails, openSUSE - SUSE Linux Enterprise Server (SLES), Arch Linux-Manjaro Linux, Alpine Linux-BusyBox - Slackware - Android-Chrome OS); UNIX-UNIX Distros (FreeBSD-OpenBSD, BSD, macOS), Linux networking, Linux storage, Linux secrets, Linux security (Linux IAM-LDAP-Linux Firewall-Linux Proxy), Linux docs, Linux GitHub, Linux Containers, Linux VM, Linux on AWS, Linux on Azure, Linux on GCP, Linux on Windows (WSL), Linux on IBM, Linux on Mainframe (Linux on IBM Z mainframe - Linux for System z - IBM LinuxONE), Embedded Linux, Linus IoT-Linux on Raspberry Pi, LinuxOps-Linux sysadmin, systemd-userland-kernel space-POSIX-SUS-Linux filesystem-Linux architecture, Linux books-UNIX books, Linux courses, Linux Foundation, Linux history, Linux philosophy, Linux adoption, Linux Glossary - Glossaire de Linux - French, Linux topics (navbar_linux and navbar_unix - see also navbar_fedora, navbar_rhel, navbar_centos, navbar_debian, navbar_ubuntu, navbar_linux_mint, navbar_freebsd, navbar_opensuse, navbar_manjaro, navbar_kali_linux, navbar_nixos, navbar_alpine_linux, navbar_tails_linux, navbar_slackware, navbar_rocky_linux, navbar_arch_linux, navbar_oracle_linux)


Cloud Monk is Retired ( for now). Buddha with you. © 2025 and Beginningless Time - Present Moment - Three Times: The Buddhas or Fair Use. Disclaimers

SYI LU SENG E MU CHYWE YE. NAN. WEI LA YE. WEI LA YE. SA WA HE.