Review Questions
The answers to these review questions are in Appendix A.
__________ is the use of Linux file and directory permissions to limit access to these items.
__________ makes use of security groups or domains to limit access to objects, such as files and directories.
Which of the following are SELinux contexts applied to? (Choose all that apply.)
Files
Users
Processes
All of these answers are correct.
In which mode is SELinux not functional at all?
Permissive
Disabled
Inactive
Null
Which command displays the current SELinux mode?
What command provides overall status information about SELinux?
Which of the following is an SELinux value that is used to change the behavior of an SELinux security policy?
Flag
Context
Switch
Boolean
Which option to the ps and ls commands displays SELinux security contexts?
AppArmor can be put into complain mode by using the __________ command.
The __________ command displays a list of processes not restricted by AppArmor profiles.
Answer
DAC
MAC
A and C. Answer B is incorrect because SELinux contexts are not applied to user accounts. Answer D is incorrect because answer B is incorrect.
B. Answer A is incorrect because SELinux does function in permissive mode (but doesn’t block access). Answers C and D are incorrect because these are not valid SELinux modes.
getenforce
sestatus
D. Answers A and C are incorrect because these are not valid SELinux terms. Answer B is incorrect because this is a feature that is applied to a file or directory, not a feature that changes a security policy.
-Z
aa-complain
aa-unconfined