Security-enhanced Linux (SELinux) is an implementation of a mandatory access control mechanism. This mechanism is in the Linux kernel, checking for allowed operations after standard Linux discretionary access controls are checked.
To understand the benefit of mandatory access control (MAC) over traditional discretionary access control (DAC), you need to first understand the limitations of DAC.
Read the rest of this entry »

Zombie process is a process observed in Unix/Linux operating system. Zombie process are those process which has finished execution but still have an entry in the process table. This entry for the zombie process is used by the parent to know about the exit status of its child .