Which access control model is established by using SELinux?

Which access control model is established by using SELinux?

• A. Security Access Control (SAC)
• B. Group Access Control (GAC)
• C. Discretionary Access Control (DAC)
• D. Mandatory Access Control (MAC)

Answer: (D)

The access control model established by SELinux is Mandatory Access Control (MAC). In MAC, access rights are regulated by a central authority based on multiple levels of security and predefined policies, rather than being at the discretion of the end user. SELinux implements MAC to enforce strict rules on how processes and users can interact with files and other resources. It does this through labeling of all processes and files, which informs the kernel's decision on permissions, ensuring that even privileged users cannot override these policies. This model provides enhanced security by reducing the possibility of accidental or malicious alterations to access rights. In contrast, the other models mentioned such as Discretionary Access Control (DAC) allow users to control access to their own resources, which could lead to unintended security flaws if users grant excessive permissions. Security Access Control (SAC) and Group Access Control (GAC) are not standard models recognized within common access control frameworks, making them less relevant in the context of SELinux's implementation. Thus, MAC stands out as the correct answer due to its rigorous control mechanisms and security posture which SELinux exemplifies.

The access control model established by SELinux is Mandatory Access Control (MAC). In MAC, access rights are regulated by a central authority based on multiple levels of security and predefined policies, rather than being at the discretion of the end user.

SELinux implements MAC to enforce strict rules on how processes and users can interact with files and other resources. It does this through labeling of all processes and files, which informs the kernel's decision on permissions, ensuring that even privileged users cannot override these policies. This model provides enhanced security by reducing the possibility of accidental or malicious alterations to access rights.

In contrast, the other models mentioned such as Discretionary Access Control (DAC) allow users to control access to their own resources, which could lead to unintended security flaws if users grant excessive permissions. Security Access Control (SAC) and Group Access Control (GAC) are not standard models recognized within common access control frameworks, making them less relevant in the context of SELinux's implementation. Thus, MAC stands out as the correct answer due to its rigorous control mechanisms and security posture which SELinux exemplifies.