Domain 3: Security Engineering; Secure Operating Systems and Software Architecture

Question 1

What are the kernels two basic designs?

Answer 1

Monolithic and microkernel.

Question 2

What is the core function in the kernel that mediates access between subjects and objects?

Answer 2

Reference Monitor.

Question 3

What does setuid and setgid do?

Answer 3

Setuid is a Linux and UNIX file permission that makes an executable run with the permissions of the file’s owner or group.

Question 4

What is a concern regarding setuid and setgid?

Answer 4

Setuid programs must be carefully scrutinized for security holes: attackers may attempt to trick the passwd command to alter other files. The integrity of all setuid and setgid programs on a system should be closely monitored.