LFCE on Linux Academy

Question 1

SELinuxPolicies

targeted (the default policy)

Answer 1

• Only targeted processes are protected by SELinux .

- Everything else is unconfined.

Question 2

SELinuxPolicies

mls (Multi-Level Security)

Answer 2

• Typically only used when the absolute highest security is needed.
• Can be extremely complex to set up.

Question 3

SELinuxPolicies

Labeling

Answer 3

Files, processes, ports, etc, are all labeled with an SELinux context.

Question 4

SELinuxPolicies

Type Enforcement

Answer 4

Type enforcement is the part of the policity that says, for instance, “A process running with the label httpd_t can have read access to a file labeled httpd_config_t

Question 5

SELinuxPolicies

getenforce

Answer 5

gets the SELinux enforcement mode.

Question 6

SELinuxPolicies

setenforce 0

Answer 6

Temporarily set SELinux mode to permissive.

Question 7

SELinuxPolicies

setenforce 1

Answer 7

Temporarily set SELinux mode to enforced.

Question 8

SELinuxPolicies

restorecon

Answer 8

(restore context) This will restore the SELinux context of files.