||<tablestyle="font-size: 0.9em; width:90%; background:#ffc8c8; margin: 0 0 1em 1em;" style="padding:0.5em;">'''Warning'''||
||The Ubuntu-specific "selinux" and "selinux-policy-ubuntu" packages documented here have not received much attention since Karmic, and appear to be effectively broken in Precise.||
||If you wish to use SELinux in Ubuntu, the "selinux-basics" and "selinux-policy-default" packages from Debian are still being actively maintained.  Documentation relevant to those packages can be found at http://wiki.debian.org/SELinux||

||<tablestyle="float:right; font-size: 0.9em; width:30%; background:#F1F1ED; background-repeat: no-repeat; background-position:  98% 0.5ex; margin: 0 0 1em 1em; padding: 0.5em;"><<TableOfContents>>||

== Introduction ==
SELinux is a Mandatory Access Control (MAC) system which is a kernel (LSM) enhancement to confine programs to a limited set of resources.

== SELinux in Ubuntu ==
SELinux can be enabled in Ubuntu by installing the "selinux" meta-package, which will make the needed changes to the system, and install the Tresys policies for Ubuntu: {{{
sudo apt-get install selinux}}}
After installation, you will be prompted to reboot the system to label and activate SELinux.

== More information ==
 * [[http://selinuxproject.org/page/User_Resources|SELinux Project]]
 * [[http://lists.ubuntu.com/mailman/listinfo/ubuntu-hardened|Ubuntu Security mailing list]]
 * Ubuntu Blueprints:
  * [[SpecSELinux|Initial]]
  * [[HardySELinux|Hardy]]