SELinux Policy and Enforcement Modes

Submit

2. What is the primary difference between Enforcing and Permissive modes?

Enforcing logs violations; Permissive blocks them

Enforcing blocks violations; Permissive logs them

Enforcing requires reboot; Permissive does not

Enforcing is faster; Permissive is more secure

3. Disabling SELinux can be done by setting SELINUX=disabled in /etc/selinux/config and rebooting.

True

False

Submit

5. Which directory typically contains SELinux policy modules?

/etc/selinux/modules

/usr/share/selinux

/var/lib/selinux

/opt/selinux/policies

6. The SELinux policy rule 'allow httpd_t var_www_t:file read;' grants httpd processes read access to web files.

True

False

Submit

8. Which command relabels the entire filesystem according to the SELinux policy?

Restorecon -R /

Setfattr -R /

Touch /.autorelabel

Semodule -B

9. SELinux uses role-based access control (RBAC) to enforce mandatory access control (MAC).

True

False

10. What tool is used to manage SELinux boolean settings?

Semanage

Getsebool

Setsebool

Boolctl

11. What does SELinux stand for?

Security Extended Linux

Security-Enhanced Linux

Secure Encryption Linux

System Enforcement Linux

12. Which SELinux mode fully enforces policy and denies non-compliant access?

Permissive

Disabled

Enforcing

Audit

13. In the context user_u:role_r:type_t:level, what does 'role_r' represent?

The user identity

The role assignment

The security type

The classification level

Submit

15. Which file contains SELinux policy configuration settings?

/etc/selinux/config

/var/log/selinux

/usr/selinux/policy

/sys/selinux/settings

Submit

17. What command displays the current SELinux mode?

Selinux-status

Getenforce

Sestatus

Checkmode

18. In SELinux, what are the three main policy types?

Strict, Targeted, Minimum

Strict, Permissive, Enforcing

Mandatory, Discretionary, Role-Based

Default, Custom, Admin

19. Which SELinux enforcement mode logs policy violations without blocking access?

Enforcing

Permissive

Disabled

Audit

Linux+ V8 SELinux Policy and Enforcement Modes Quiz

1. The 'Targeted' policy in SELinux protects ____.

2.

What first name or nickname would you like us to use?

2. What is the primary difference between Enforcing and Permissive modes?

3. Disabling SELinux can be done by setting SELINUX=disabled in /etc/selinux/config and rebooting.

4. The 'chcon' command changes SELinux context on ____.

5. Which directory typically contains SELinux policy modules?

6. The SELinux policy rule 'allow httpd_t var_www_t:file read;' grants httpd processes read access to web files.

7. A domain in SELinux policy refers to a process ____.

8. Which command relabels the entire filesystem according to the SELinux policy?

9. SELinux uses role-based access control (RBAC) to enforce mandatory access control (MAC).

10. What tool is used to manage SELinux boolean settings?

11. What does SELinux stand for?

12. Which SELinux mode fully enforces policy and denies non-compliant access?

13. In the context user_u:role_r:type_t:level, what does 'role_r' represent?

14. SELinux policy rules that define what subjects can do on objects are called ____.

15. Which file contains SELinux policy configuration settings?

16. A SELinux security context consists of user, role, type, and ____.

17. What command displays the current SELinux mode?

18. In SELinux, what are the three main policy types?

19. Which SELinux enforcement mode logs policy violations without blocking access?