Security-Enhanced Linux ( SELinux ) is a Linux feature that gives a variety of security rules , including mandatory access controls . It does so by using Linux Security Modules ( LSM ) in the Linux kernel . Security-Enhanced Linux ( SELinux ) is a Linux feature that provides a mechanism for supporting access control security policies , including United States Department of Defense style mandatory access controls , through the use of Linux Security Modules ( LSM ) in the Linux kernel .