##(see the SpecSpec for an explanation) ''Please check the status of this specification in Launchpad before editing it. If it is Approved, contact the Assignee or another knowledgeable person before making changes.'' ## Register at https://launchpad.net/distros/ubuntu/+specs * '''Launchpad entry''': selinux-by-default * '''Packages affected''': == Summary == SELinux is a security infrastructure providing many benefits for server and enterprise desktop administrators. It has been well tested by Red Hat in both their Fedora Core and RHEL offerings and there's a growing community built around it. There are now useful policies and tools to manage SELinux. This spec wishes to investigate whether enabling SELinux by default in Ubuntu is a viable goal, and what the best method is for achieving that. == Rationale == MACLs are a useful security feature enabling fine-grained control of a system. In certain circumstances, they can mitigate vulnerabilities in software and also help defend against viruses and hackers. == Use cases == == Scope == == Design == == Implementation == === Code === === Data preservation and migration === == Unresolved issues == == BoF agenda and discussion == ---- CategorySpec