A kernel security mechanism that applies mandatory access control to processes and files.
A mandatory access control (MAC) mechanism that strictly governs, via policy, what each process is allowed to access -- on top of conventional permissions. Enabled by default on RHEL-family distributions. A policy violation can silently break an application in ways that look inexplicable, so a common troubleshooting move is switching temporarily to Permissive mode, which logs violations without actually blocking them, to isolate the cause.
© 2026 ITBGM