LFCS · Question #392
What is the difference between an SELinux domain and an SELinux type?
The correct answer is C. A domain is assigned to processes while a type is assigned to objects such as files and directories. In SELinux, a domain specifically refers to the type assigned to a process, while a type is a more general label applied to all objects, including files, directories, and processes.
Question
Options
- AA domain is a group of SELinux types.
- BA domain defines the range of access that an object has. A type is used to define an access level.
- CA domain is assigned to processes while a type is assigned to objects such as files and directories.
- DA domain is an alternative keyword for type.
How the community answered
(24 responses)- A4% (1)
- B8% (2)
- C88% (21)
Why each option
In SELinux, a domain specifically refers to the type assigned to a process, while a type is a more general label applied to all objects, including files, directories, and processes.
A domain is not merely a group of types; it is a type itself, specifically for processes.
While types and domains define access, this description is not the fundamental difference in what they are assigned to.
An SELinux domain is a specific type applied to a process, defining its permissions, whereas a type is a more general classification label applied to files, directories, network ports, and other system objects, as well as processes.
A domain is not an alternative keyword for type; rather, a domain is a special kind of type used for processes.
Concept tested: SELinux domain vs. type
Source: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/using_selinux/getting-started-with-selinux_using-selinux#selinux-components_getting-started-with-selinux
Topics
Community Discussion
No community discussion yet for this question.