SELinux
A Linux security module that provides mandatory access control (MAC) mechanisms, defining process access permissions to system resources through policies.
Timeline (last 90 days)
Classic implementations of runtime enforcement include Linux's seccomp, SELinux's mandatory access control (MAC), and runtime application self-protection (RASP) in web applications.
The Android kernel's restrictions on system calls (such as ptrace and clone) and SELinux policies make it difficult to achieve a full Linux container experience on non-rooted devices.
GrapheneOS uses the hardened_malloc hardened memory allocator to defend against heap overflow attacks and has strengthened its SELinux security policies.
All Facts (4)
在Linux系统中实现AI工具的运行隔离方案包括Unix权限模型、chroot jail、Linux命名空间、cgroups、SELinux和AppArmor
60%UnverifiedClassic implementations of runtime enforcement include Linux's seccomp, SELinux's mandatory access control (MAC), and runtime application self-protection (RASP) in web applications.
50%UnverifiedThe Android kernel's restrictions on system calls (such as ptrace and clone) and SELinux policies make it difficult to achieve a full Linux container experience on non-rooted devices.
50%UnverifiedGrapheneOS uses the hardened_malloc hardened memory allocator to defend against heap overflow attacks and has strengthened its SELinux security policies.
50%