SELinux
By default, Security Enhanced Linux (SELinux) for AL2023 is
enabled
and set to permissive
mode. In permissive
mode, permission denials are logged but not enforced.
SELinux is a security feature of the Amazon Linux kernel, which was
disabled
in AL2. SELinux is a collection of kernel features
and utilities that provides mandatory access control (MAC) architecture into
the major subsystems of the kernel.
For more information, see Setting SELinux modes for AL2023.
For more information about SELinux repositories, tools, and policies, see
SELinux Notebook