CAS-001 · Question #509
A Linux security administrator is attempting to resolve performance issues with new software installed on several baselined user systems. After investigating, the security administrator determines…
The correct answer is A. Enforcing mode with an incorrectly configured policy. SELinux in Enforcing mode actively blocks any actions not permitted by its policy. If the policy is incorrectly configured (e.g., it doesn't include rules for the new software's required file accesses, ports, or process transitions), SELinux will silently deny those operations…
Question
A Linux security administrator is attempting to resolve performance issues with new software installed on several baselined user systems. After investigating, the security administrator determines that the software is not initializing or executing correctly. For security reasons, the company has implemented trusted operating systems with the goal of preventing unauthorized changes to the configuration baseline. The MOST likely cause of this problem is that SE Linux is set to:
Options
- AEnforcing mode with an incorrectly configured policy.
- BEnforcing mode with no policy configured.
- CDisabled with a correctly configured policy.
- DPermissive mode with an incorrectly configured policy.
How the community answered
(35 responses)- A80% (28)
- B6% (2)
- C3% (1)
- D11% (4)
Explanation
SELinux in Enforcing mode actively blocks any actions not permitted by its policy. If the policy is incorrectly configured (e.g., it doesn't include rules for the new software's required file accesses, ports, or process transitions), SELinux will silently deny those operations, causing the software to fail to initialize or run correctly. Enforcing with NO policy (B) would deny virtually everything and make the system unusable broadly, not just for new software. Disabled (C) would not block anything. Permissive mode (D) only logs violations without blocking them, so the software would still run despite policy mismatches. The scenario describes targeted blocking of new software while the rest of the baseline works, which is the hallmark of Enforcing mode with an incomplete or misconfigured policy.
Topics
Community Discussion
No community discussion yet for this question.