SELinux

The goal of the bachelor thesis SELinux is to summarize the principles and current development status of open-source security project called Security-Enhanced Linux. The main sources for the thesis were official documentation for the project, English books regarding the subject, papers and slides from security conferences and practical knowledge gained by running the software being researched. The thesis represents an unique overview of SELinux features, alternatives and history in Czech language. It sums up majority of the available sources and adds real life examples of how SELinux works in individual Linux distributions. Final part of the thesis is dedicated to comparison with existing alternatives implementing Mandatory Access Control in Linux. The main contribution of the thesis is that it presents a so far non-existent overview of available solutions for Mandatory Access Control and brings out their main advantages and disadvantages in comparison to SELinux. It also represents a complex summary of how SELinux is implemented in various Linux distributions. The thesis can be utilized as a brief introduction to hardening Linux systems, as an overview of available products bringing enhanced security to this operating system, or even as a basis for making decisions of which security system to implement. It might also be used as a brief summary of SELinux history.