Debian 和 CentOS 的安全机制

Question

SELinux、FirewallD 和 Iptables 是否预装在 Debian - Stretch（9 或 9.2）和 CentOS（7.4-1708）上，还是我必须手动安装它们？或者哪里可以查到？感谢您的所有回答。

Answer 1

在 Debian/Sid（可能还有稳定 Debian 的最新版本）上，您有以下软件包：

 p  selinux-basics - SELinux basic support
 p  selinux-policy-default - Strict and Targeted variants of the SELinux policy
 p  selinux-policy-dev - Headers from the SELinux reference policy for
                         building modules
 p  selinux-policy-doc - Documentation for the SELinux reference policy
 p  selinux-policy-mls - MLS (Multi Level Security) variant of the SELinux policy
 p  selinux-policy-src - Source of the SELinux reference policy for customization
 p  selinux-utils - SELinux utility programs
 i  iptables - administration tools for packet filtering and NAT
 p  iptables-converter - convert iptables-commands from a file
                         to iptables-save format
 p  iptables-converter-doc - sphinx documentation for iptables-converter
 p  iptables-dev - transitional dummy package
 p  iptables-nftables-compat - iptables compat tools for nftables
 p  iptables-optimizer - sort iptables rules by packet counters

和许多其他（通过 获得aptitude search）。当然你需要安装它们。