RHEL5/6 Interview Questions : SELinux

1. What is the point of using SELinux?

1a. SELinux provides enhanced granular security for the Linux operating system.

2. What are SELinux Booleans?

2a. SELinux Booleans provide restrictions to different aspects of a service.

3. What command can you use to change the context of files?

3a. chcon

4. What command can you use to query Boolean values?

4a. getsebool

5. What command and option do you use to view the description of Boolean values?

5a. semanage boolean -l

6. How would you view all Boolean options for the HTTP service?

6a. getsebool –a | grep http

7. Which log file is used to keep track of policy violations?

7a. The /var/log/audit/audit.log file contains all policy violations.

8. How would you disable SELinux protection for NFS, allowing shares to be read/write?

8a. setsebool –P nfs_export_all_rw=1