What feature does SELinux provide concerning Mandatory Access Control?

What feature does SELinux provide concerning Mandatory Access Control?

• A. Monitors file access by unprivileged users.
• B. Produces only Mandatory Access Control policies.
• C. Enforces policies that restrict programs and services.
• D. Stops system files being modified without alerting users.

Answer: (C)

SELinux (Security-Enhanced Linux) provides Mandatory Access Control (MAC) by enforcing policies that restrict the capabilities of programs and services on the system. This means that SELinux defines rules that specify which users and processes have permission to access certain resources, such as files, directories, and devices, regardless of the permissions a user has on those resources. The core principle of MAC is that access control decisions are made based on policies set by the system administrator, not by the users or processes themselves. This helps to minimize the risk of an unauthorized or compromised program performing actions that could harm the system or compromise security. SELinux uses these policies to tightly control the interactions between different applications and user processes, ensuring that even if a user or a compromised application tries to access or manipulate a resource, it will be denied unless explicitly allowed by the policies. This approach offers a higher level of security compared to traditional discretionary access control mechanisms, where users could potentially have more control over their permissions, leading to vulnerabilities.

SELinux (Security-Enhanced Linux) provides Mandatory Access Control (MAC) by enforcing policies that restrict the capabilities of programs and services on the system. This means that SELinux defines rules that specify which users and processes have permission to access certain resources, such as files, directories, and devices, regardless of the permissions a user has on those resources.

The core principle of MAC is that access control decisions are made based on policies set by the system administrator, not by the users or processes themselves. This helps to minimize the risk of an unauthorized or compromised program performing actions that could harm the system or compromise security. SELinux uses these policies to tightly control the interactions between different applications and user processes, ensuring that even if a user or a compromised application tries to access or manipulate a resource, it will be denied unless explicitly allowed by the policies.

This approach offers a higher level of security compared to traditional discretionary access control mechanisms, where users could potentially have more control over their permissions, leading to vulnerabilities.