Which of the following access control models is established by using SELinux?

Question

Options

• ASecurity Access Control (SAC)
• BGroup Access Control (GAC)
• CUser Access Control (UAC)
• DDiscretionary Access Control (DAC)
• EMandatory Access Control (MAC)

• A
  2% (1)
• C
  7% (3)
• D
  2% (1)
• E
  88% (37)

Explanation

SELinux (Security-Enhanced Linux) implements Mandatory Access Control (MAC), where security policies are enforced by the operating system itself rather than by individual users or file owners - making E correct. In MAC, a central authority defines rules that even root cannot override, which is exactly how SELinux confines processes to only what they're explicitly permitted to do via policy labels and contexts.

Why the distractors are wrong:

• A (SAC) and B (GAC) - these are fabricated terms with no standard meaning in access control models.
• C (UAC) - User Account Control is a Windows privilege elevation feature, unrelated to Linux or policy-based access control.
• D (DAC) - Discretionary Access Control is the traditional Linux permission model (chmod/chown), where owners decide who can access their files. SELinux was specifically created to go beyond DAC's limitations.

Memory tip: Think MAC = Mandatory = Machine decides - the system enforces policy regardless of user wishes. SELinux adds a mandatory security layer on top of Linux's existing DAC, so when you see SELinux, think MAC.

No community discussion yet for this question.