LFCS · Question #410
What is one of the primary claimed benefits of Smack over SELinux?
The correct answer is C. Configuration of Smack is much more simple. One of the primary claimed benefits of Smack over SELinux is its significantly simpler configuration, making it easier to deploy and manage Mandatory Access Control policies.
Question
Options
- ASmack implements Rule Set Based Access Control. SELinux doesn't support this model.
- BSELinux has export restrictions placed on it by the NSA.
- CConfiguration of Smack is much more simple.
- DSmack allows users to share files without administrator intervention.
How the community answered
(39 responses)- A5% (2)
- C92% (36)
- D3% (1)
Why each option
One of the primary claimed benefits of Smack over SELinux is its significantly simpler configuration, making it easier to deploy and manage Mandatory Access Control policies.
SELinux implements Type Enforcement, a form of Rule Set Based Access Control, so the statement that it doesn't support this model is incorrect.
SELinux is open-source software developed by the NSA and is widely used without export restrictions; this claim is factually inaccurate.
Smack (Simplified Mandatory Access Control Kernel) was explicitly designed for simplicity, offering a much easier-to-understand and configure policy language compared to the complex and granular policy development often required for SELinux.
Smack, as a Mandatory Access Control system, aims to enhance security by restricting access, not to allow users to bypass administrator intervention for file sharing, which would typically be a security risk.
Concept tested: Mandatory Access Control (MAC) comparison
Source: https://www.kernel.org/doc/html/latest/admin-guide/LSM/Smack.html
Topics
Community Discussion
No community discussion yet for this question.