SELinux

Security-Enhanced Linux (SELinux) is a security architecture for Linux systems that allows administrators to have more control over who can access the system.

Mandatory Access Control

Terminology

allow <domain> <type>:<class> { <permissions> };

References: