openSUSE Tumbleweed Moves to SELinux
Quoting: openSUSE Tumbleweed Moves to SELinux —
Big changes are about to land in openSUSE Tumbleweed – maintainers have announced that SELinux will become the default Mandatory Access Control (MAC) system for new Tumbleweed installations starting with snapshot 20250211 (already in place).
The switch to install SELinux by default is in early implementation and aligns with a decision to grow adoption of SELinux for both SUSE and openSUSE. It’s expected to increase security by confining more services by default.
Regarding this, Tumbleweed’s next ISO release will come with SELinux enabled and running in enforcing mode by default. Just a quick note—this change was announced on the openSUSE mailing list around mid-last year.