Status: OUT
RHEL 9 defense-in-depth from hardware CPU mitigations through SELinux, firewalld, and crypto policies to LUKS2/NBDE data-at-rest protection is governed by the enterprise identity ecosystem (IdM with LDAP/Kerberos/CA, AD integration, vault secrets), ensuring that access to every security layer is identity-authenticated and that data protection decisions are centrally managed through the identity infrastructure.