SELinux is a Linux feature that:

A.
monitors system file access by unprivileged users and warns them when they are trying to gain
access to files beyond their permission levels set in the Mandatory Access Control policies.

B.
provides only Mandatory Access Control policies. Additional access control models such as
Rolebased access control require additional tools to implement.

C.
enforces Mandatory Access Control policies that can restrict user space programs and system
servers to the minimum amount of privilege required to operate correctly.

D.
ensures that system files referenced in the Mandatory Access Control policies aret modified and
alerts administrators when changes occur.