In this video, we'll talk about mandatory access control.
So default Linux access control is discretionary.
We'll be talking about permissions, for instance.
And that means that every user can grant permissions to other users.
There is no centralized control.
Also, standard Linux security is a collection of tools
that focus on specific areas of the operating systems.
It has been developed as such throughout the years,
and that is because of the very old legacy of Unix behind Linux.
And because of this approach,
it leaves Linux vulnerable for specific types of problems,
like zero-day exploits, for instance.
And that is why mandatory access control is needed.
Mandatory access control offers an overall approach to security,
where something that hasn't been specifically allowed will be denied,
and there is nothing that the user can do to change it.
There are two main solutions for mandatory access control,
and these are SELinux and AppArmor.
In this course and for the Linux Plus exam,
you need to know about SELinux, so that is what comes up next.