SELinux modes, contexts, booleans, AppArmor profiles, ACLs, sudoers, PAM and capabilities.
36 cards · basic cards · AI-written, checked twice. Edit anything.
- What does SELinux stand for?
Show answer
Security Enhanced Linux- What are the three main modes of SELinux?
Show answer
Enforcing, Permissive, and Disabled- In SELinux, which mode logs violations but does not block them?
Show answer
Permissive- In SELinux, which mode logs and blocks all violations?
Show answer
Enforcing- What command displays the current SELinux mode?
Show answer
getenforce- What command temporarily changes the SELinux mode?
Show answer
setenforce- What are the four components of an SELinux context?
Show answer
User, Role, Type, and Level- What does the type component of an SELinux context define?
Show answer
The domain or type for files and processes- What does the level component of an SELinux context represent?
Show answer
The sensitivity and category for Multi-Level Security (MLS)- What command displays the SELinux context of files?
Show answer
ls -Z- What are SELinux booleans?
Show answer
Tunable policy parameters that can be enabled or disabled- What command lists all SELinux booleans and their states?
Show answer
getsebool -a- What does AppArmor provide for process confinement?
Show answer
Mandatory access control based on per-application profiles- What are the two main modes of an AppArmor profile?
Show answer
Enforce and Complain- In AppArmor, which mode logs violations without blocking them?
Show answer
Complain
FlashKeepers