SELinux
Mandatory access-control framework in the Linux kernel.
SELinux enforces mandatory access control through kernel-level policy, originally developed by the NSA. It is the default MAC layer on Fedora, RHEL, AlmaLinux, Rocky Linux, and CentOS Stream.
Install
Built into the kernel; userspace tools: sudo dnf install policycoreutils
