Understanding Basic SELinux Implementation and Tools

Question 1

An implementation of a flexible mandatory access control MAC architecture in the Linux OS that incorporates a set of kernel modifications and user space tools

Answer 1

SELinux Security-Enhanced Linux
Modes of Operation (enforcing, permissive and disabled)
Security contexts (user, role, type and range or level)

Question 2

Modes of operation

Answer 2

enforcing, permissive and disabled

Question 3

security contexts

Answer 3

user, role, type and range or level

Question 4

semanage

Answer 4

use the -l option to list objects specified

Question 5

getenforce

Answer 5

retrieve the current modde of selinux

Question 6

getsbool

Answer 6

retrieve se linx boolean values

Question 7

estatus

Answer 7

retrieve the status of selinux

Question 8

ls -z display security context in content list

Answer 8

ps- z display security context in process listse

Question 9

semanage

Answer 9

selinux policy management tool

Question 10

setenforce

Answer 10

modify the selinux mode

Question 11

setsbool

Answer 11

set selinux boolean values

Question 12

chcon

Answer 12

change file security context

Question 13

restorecon

Answer 13

restore files default security context