Which default Linux security module provides context-based permissions for CentOS and Red Hat Enterprise Linux?

Which default Linux security module provides context-based permissions for CentOS and Red Hat Enterprise Linux?

• A. SELinux
• B. AppArmor
• C. DAC
• D. Mandatory Access Control

Answer: (A)

Context-based permissions are provided by SELinux, which is the Linux security module used by CentOS and Red Hat Enterprise Linux by default. SELinux attaches security labels (types, roles, and domains) to all objects and subjects, and enforces access decisions based on a policy that defines how those labels can interact. This allows fine-grained control beyond traditional UNIX permissions, such as restricting a web server process from accessing user home directories even if UNIX permissions would allow it. AppArmor is another MAC option on some distributions, but it is not the default on CentOS/RHEL. DAC refers to standard discretionary access control based on user IDs and permissions, not the context-based MAC approach SELinux provides. Mandatory Access Control is the broader concept SELinux implements.

Context-based permissions are provided by SELinux, which is the Linux security module used by CentOS and Red Hat Enterprise Linux by default. SELinux attaches security labels (types, roles, and domains) to all objects and subjects, and enforces access decisions based on a policy that defines how those labels can interact. This allows fine-grained control beyond traditional UNIX permissions, such as restricting a web server process from accessing user home directories even if UNIX permissions would allow it. AppArmor is another MAC option on some distributions, but it is not the default on CentOS/RHEL. DAC refers to standard discretionary access control based on user IDs and permissions, not the context-based MAC approach SELinux provides. Mandatory Access Control is the broader concept SELinux implements.