LX0-104 · Question #390
How are SELinux permissions related to standard Linux permissions?
The correct answer is D. SELinux permissions are verified after standard Linux permissions. SELinux permissions act as a mandatory access control (MAC) layer, enforcing security after and in addition to standard discretionary access control (DAC) Linux permissions.
Question
Options
- ASELinux permissions override standard Linux permissions.
- BStandard Linux permissions override SELinux permissions.
- CSELinux permissions are verified before standard Linux permissions.
- DSELinux permissions are verified after standard Linux permissions.
How the community answered
(20 responses)- A10% (2)
- B5% (1)
- D85% (17)
Why each option
SELinux permissions act as a mandatory access control (MAC) layer, enforcing security after and in addition to standard discretionary access control (DAC) Linux permissions.
SELinux permissions do not override standard Linux permissions; instead, both must grant access for an operation to succeed.
Standard Linux permissions do not override SELinux permissions; both must allow access.
SELinux permissions are verified after standard Linux permissions. Access is only granted if both DAC and MAC allow it.
SELinux implements Mandatory Access Control (MAC), which functions as an additional layer of security enforcement. When an access request is made, the kernel first checks the standard Linux permissions (Discretionary Access Control - DAC); if DAC permits the access, SELinux then performs its own check. Access is only granted if both DAC and SELinux allow it.
Concept tested: SELinux relationship with DAC (Discretionary Access Control)
Source: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/selinux_users_and_administrators_guide/sect-selinux_users_and_administrators_guide-working_with_selinux-selinux_concepts
Topics
Community Discussion
No community discussion yet for this question.