TechKnowSurge
CompTIA Security+ 4.5
TechKnowSurge Catalog Interactives Which SELinux Mode?
InteractiveSecurityFree

Which SELinux Mode?

Off, blocking, or logging only? Sort each description into the SELinux mode it names.

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

SELinux, security-enhanced Linux, adds mandatory access control to Linux: a central policy decides what processes may reach what, on top of Linux's own discretionary permissions. Both are checked, Linux permissions first, then SELinux. SELinux runs in one of three modes. Disabled: it is switched off and applies no policy of its own, so only the ordinary Linux permissions decide access. Enforcing: the policy is active and any access it forbids is blocked. Permissive: the policy is evaluated and violations are written to the log, but they are still allowed, which is useful for seeing what a policy would block before you commit to enforcing it. To sort a card, ask what the mode does with a violation: nothing (disabled), block it (enforcing), or log it but allow it (permissive).

What you'll learn

Aligned to

CompTIA Security+
4.5 Given a scenario, modify enterprise capabilities to enhance security.

Key terms

Security-enhanced Linux
SELinux
Security-enhanced Linux is an implementation of Mandatory Access Control in the Linux kernel that enforces policy-driven access rules on processes and files, limiting damage from compromised applications.
Mandatory Access Control
MAC
An access control model in which the users of a resource cannot change its permissions themselves — anyone who needs access must obtain it from a designated authority, such as IT or whoever is put in charge of that resource. It is the opposite end of the spectrum from discretionary access control, where the resource's own users grant access at their discretion.
Discretionary Access Control
DAC
Discretionary Access Control is an access control model in which resource owners have the authority to grant or revoke access to their own resources, typically implemented through file system permissions and access control lists.

Topics

Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →