An administrator is building a custom SELinux policy for a host. The policy should apply restrictions only to the domains explicitly included, leaving all other processes unconfined. Which policy base should the administrator choose to satisfy these conditions?
The minimum policy base loads the smallest set of rules and confines only those domains defined in the policy, leaving unspecified processes entirely unrestricted. The targeted base confines a predefined list of services while leaving user space largely unconfined. The strict base enforces controls on all system processes, and the multilevel security (MLS) base adds mandatory sensitivity labeling beyond basic confinement.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is SELinux?
Open an interactive chat with Bash
What is the difference between the minimum, targeted, strict, and MLS SELinux policies?
Open an interactive chat with Bash
What tools are available for creating and managing SELinux policies?