nerdexam
Linux_Foundation

LFCS · Question #410

What is one of the primary claimed benefits of Smack over SELinux?

The correct answer is C. Configuration of Smack is much more simple. One of the primary claimed benefits of Smack over SELinux is its significantly simpler configuration, making it easier to deploy and manage Mandatory Access Control policies.

Submitted by suresh_in· Apr 18, 2026Operation of Running Systems

Question

What is one of the primary claimed benefits of Smack over SELinux?

Options

  • ASmack implements Rule Set Based Access Control. SELinux doesn't support this model.
  • BSELinux has export restrictions placed on it by the NSA.
  • CConfiguration of Smack is much more simple.
  • DSmack allows users to share files without administrator intervention.

How the community answered

(39 responses)
  • A
    5% (2)
  • C
    92% (36)
  • D
    3% (1)

Why each option

One of the primary claimed benefits of Smack over SELinux is its significantly simpler configuration, making it easier to deploy and manage Mandatory Access Control policies.

ASmack implements Rule Set Based Access Control. SELinux doesn't support this model.

SELinux implements Type Enforcement, a form of Rule Set Based Access Control, so the statement that it doesn't support this model is incorrect.

BSELinux has export restrictions placed on it by the NSA.

SELinux is open-source software developed by the NSA and is widely used without export restrictions; this claim is factually inaccurate.

CConfiguration of Smack is much more simple.Correct

Smack (Simplified Mandatory Access Control Kernel) was explicitly designed for simplicity, offering a much easier-to-understand and configure policy language compared to the complex and granular policy development often required for SELinux.

DSmack allows users to share files without administrator intervention.

Smack, as a Mandatory Access Control system, aims to enhance security by restricting access, not to allow users to bypass administrator intervention for file sharing, which would typically be a security risk.

Concept tested: Mandatory Access Control (MAC) comparison

Source: https://www.kernel.org/doc/html/latest/admin-guide/LSM/Smack.html

Topics

#Linux Security Modules#Smack#SELinux#Mandatory Access Control

Community Discussion

No community discussion yet for this question.

Full LFCS Practice