Chapter 4
Process Domains and File-Level Access Controls
Section 6
Limiting the Scope of Transitions
For security reasons, Linux systems can reduce the ability for processes to gain elevated privileges under certain situations or provide additional constraints to reduce the likelihood of vulnerabilities to be exploitable. Let’s see how we could limit the scope of transitions in SELinux. - Sanitize environments on transitions