Exercises

Here’s a brief quiz about some of the essential concepts that were covered in this chapter:

1. Enumerate at least a couple of ACMs that are used in Linux.

   Hint: DAC, ACL, MAC, RBAC, MLS, MCS

2. Enumerate the fields of the SELinux security context.

   Hint: user, role, type, level

3. What is a domain in SELinux?

   Hint: Type assigned to a process

4. Can you think of a significant difference between SELinux and AppArmor in terms of enforcing security policies?

   Hint: SELinux uses policies based on file labels, while AppArmor uses security policies based on paths.

5. How do we toggle an AppArmor application profile between the enforce and complain modes?

   Hint: Using aa-enforce and aa-complain

6. How many chains can you think of in the Linux kernel networking stack?

   Hint: Figure 9.41 could help you.

7. What is the default firewall management solution in RHEL/Fedora? How about Ubuntu?

   Hint: firewalld (Fedora) and ufw (Ubuntu)