An XCCDF Group - A logical subset of the XCCDF Benchmark
libselinux
$ sudo zypper install libselinux
mcstransd
/etc/selinux/targeted/setrans.conf
mcstrans
$ sudo zypper remove mcstrans
setroubleshoot-plugins
$ sudo zypper remove setroubleshoot-plugins
setroubleshoot-server
$ sudo zypper remove setroubleshoot-server
setroubleshoot
$ sudo zypper remove setroubleshoot
selinux=0
/etc/default/grub
init
unconfined_service_t
$ sudo ps -eZ | grep "unconfined_service_t"
enforcing
permissive
/etc/selinux/config
SELINUX=enforcing
SELINUX=permissive
targeted
SELINUXTYPE=
mls
SELINUX=
deny_execmem
$ sudo setsebool -P deny_execmem
polyinstantiation_enabled
$ sudo setsebool -P polyinstantiation_enabled
secure_mode_insmod
$ sudo setsebool -P secure_mode_insmod
selinuxuser_execheap
$ sudo setsebool -P selinuxuser_execheap off
selinuxuser_execmod
$ sudo setsebool -P selinuxuser_execmod on
selinuxuser_execstack
$ sudo setsebool -P selinuxuser_execstack off
ssh_sysadm_login
$ sudo setsebool -P ssh_sysadm_login off