SELinux

SELinux is an enhancement to the Linux kernel released by the NSA.

"Security-enhanced Linux is a research prototype of the Linux® kernel and a number of utilities with enhanced security functionality designed simply to demonstrate the value of mandatory access controls to the Linux community and how such controls could be added to Linux."


 * http://www.nsa.gov/selinux/index.cfm


 * http://www.nsa.gov/selinux/info/faq.cfm


 * http://fedora.redhat.com/docs/selinux-faq/

Related: grsec