Under... SELinux standing !
Security-enhanced Linux (SELinux) is an implementation of a mandatory access control (MAC) mechanism. This mechanism is in the Linux kernel, checking for allowed operations after standard Linux discretionary access controls are checked.
Standard Linux security is a discretionary access control model (DAC).
Discretionary access control (DAC)
DAC is standard Linux security, and it provides no protection from broken software or malware running as a normal user or root.










