,S,E,L9UX  ,SECUR;Y-,5H.ED ,L9UX  IS !
M&ATORY-A3ESS-3TROL LAY] ! ,,NSA
OP5-S\RC$ 9TO ! K]NEL3 BORN ( ! AG5CY'S
,,FLUX_/,,FLASK RESE>* PROTOTYPES1
REL1S$ "U ! ,,GPL 9 ,DECEMB] #BJJJ1 &
M]G$ MA9L9E DUR+ ! #B4E#B4F DEVELOP;T
S]IES "<@9#BJJC">4 ,": ,UNIX P]MIS.NS
ASK 8:O [NS ? FILE & :AT D ! BITS SAY10
,S,E,L9UX ASKS 8:AT IS ? PROCESS'S
3TEXT1 & DOES POLICY GRANT ? EXACT
OP]A;N0  A WEB S]V] LABEL$ HTTPD.-T C'T
R1D _/ETC_/%AD[ EV5 IF A BUG GIVES X
ROOT1 2C NO RULE 9 ! POLICY SAYS X MAY4
,LABELS1 N PA?S
,E SUBJECT "<PROCESS"> & OBJECT "<FILE1
SOCKET"> C>RIES A SECUR;Y 3TEXT 
US]3ROLE3TYPE3LEVEL1 4PLAY$ BY LS -;,Z &
PS -;,Z4 ,POLICY COMPILES TYPE-5=CE;T
RULES "<ALL[ HTTPD.-T
HTTPD.-SYS.-3T5T.-T3FILE R1D2"> 9TO A
B9>Y DATABASE ! K]NEL 3SULTS ON E A3ESS2
D5IALS L& 9 ! AUDIT LOG Z ,,AVC
MESSAGES4 ,4TRIBU;NS %IP POLICIES 
T>GET$ "<PROTECT DAEMONS1 L1VE US]S
LOOSE"> IS ! ,F$ORA_/,,RHEL DEFAULT1
/RICT & MLS EXI/ = HI<-ASSUR.E "W4 ,!
DAILY TOOLS3 SE/ATUS1 GET5=CE_/SET5=CE1
SEMANAGE1 RE/ORECON1 AUDIT#B;ALL[4
,! H"O/ REPUTA;N
,S,E,L9UX E>N$ A REPUTA;N = HO/IL;Y  !
CLASSIC ADM9 FIX ( 8SET5=CE #J0 IS FAM\S
5 TO 2 A JOKE  B MOD]N T>GET$ POLICY
PLUS AUDIT#B;ALL[ MAKES X TRACTABLE1 &
,&ROID %IPS X 5=C+ ON E PH"O3 BILLIONS (
DEVICES RUN ,,MAC )\T "K+ X4 ,! RIVAL IS
,APP,>MOR "<,DEBIAN_/,UBUNTU_/,,SUSE'S
PA?-BAS$ ANSW]  SIMPL]1 W1K]">2 !
SECUR;Y *APT]'S ,,MAC SEC;N COMP>ES BO?4
,SEE AL
- ,L9UX ,SECUR;Y  ! ,,MAC_/L1/-PRIVILEGE
*APT] - ,9SIDE A ,L9UX ,SY/EM  ! K]NEL
LAY] X HOOKS - ,PROCESSES  ! SUBJECTS X
LABELS - ,L9UX  NFTABLES  ,,LUKS