SELinux Policy and Enforcement Modes

1. What does SELinux stand for?

Security Extended Linux

Security-Enhanced Linux

Secure Encryption Linux

System Enforcement Linux

2. Disabling SELinux can be done by setting SELINUX=disabled in /etc/selinux/config and rebooting.

True

False

3. The SELinux policy rule 'allow httpd_t var_www_t:file read;' grants httpd processes read access to web files.

True

False

4. Which command relabels the entire filesystem according to the SELinux policy?

Restorecon -R /

Setfattr -R /

Touch /.autorelabel

Semodule -B

5. SELinux uses role-based access control (RBAC) to enforce mandatory access control (MAC).

True

False

6. What tool is used to manage SELinux boolean settings?

Semanage

Getsebool

Setsebool

Boolctl

7. In the context user_u:role_r:type_t:level, what does 'role_r' represent?

The user identity

The role assignment

The security type

The classification level

8. Which file contains SELinux policy configuration settings?

/etc/selinux/config

/var/log/selinux

/usr/selinux/policy

/sys/selinux/settings

9. What command displays the current SELinux mode?

Selinux-status

Getenforce

Sestatus

Checkmode

10. Which SELinux enforcement mode logs policy violations without blocking access?

Enforcing

Permissive

Disabled

Audit

Submit

12. Which SELinux mode fully enforces policy and denies non-compliant access?

Permissive

Disabled

Enforcing

Audit

Submit

15. In SELinux, what are the three main policy types?

Strict, Targeted, Minimum

Strict, Permissive, Enforcing

Mandatory, Discretionary, Role-Based

Default, Custom, Admin

16. Which directory typically contains SELinux policy modules?

/etc/selinux/modules

/usr/share/selinux

/var/lib/selinux

/opt/selinux/policies

Submit

18. What is the primary difference between Enforcing and Permissive modes?

Enforcing logs violations; Permissive blocks them

Enforcing blocks violations; Permissive logs them

Enforcing requires reboot; Permissive does not

Enforcing is faster; Permissive is more secure

Submit

Linux+ V8 SELinux Policy and Enforcement Modes Quiz

1. What does SELinux stand for?

2.

What first name or nickname would you like us to use?

2. Disabling SELinux can be done by setting SELINUX=disabled in /etc/selinux/config and rebooting.

3. The SELinux policy rule 'allow httpd_t var_www_t:file read;' grants httpd processes read access to web files.

4. Which command relabels the entire filesystem according to the SELinux policy?

5. SELinux uses role-based access control (RBAC) to enforce mandatory access control (MAC).

6. What tool is used to manage SELinux boolean settings?

7. In the context user_u:role_r:type_t:level, what does 'role_r' represent?

8. Which file contains SELinux policy configuration settings?

9. What command displays the current SELinux mode?

10. Which SELinux enforcement mode logs policy violations without blocking access?

11. SELinux policy rules that define what subjects can do on objects are called ____.

12. Which SELinux mode fully enforces policy and denies non-compliant access?

13. A SELinux security context consists of user, role, type, and ____.

14. A domain in SELinux policy refers to a process ____.

15. In SELinux, what are the three main policy types?

16. Which directory typically contains SELinux policy modules?

17. The 'chcon' command changes SELinux context on ____.

18. What is the primary difference between Enforcing and Permissive modes?

19. The 'Targeted' policy in SELinux protects ____.