An administrator is building a custom SELinux policy for a host. The policy should apply restrictions only to the domains explicitly included, leaving all other processes unconfined. Which policy base should the administrator choose to satisfy these conditions?
The minimum policy base loads the smallest set of rules and confines only those domains defined in the policy, leaving unspecified processes entirely unrestricted. The targeted base confines a predefined list of services but still maintains default rules for others. The strict base enforces controls on all system processes, and the multilevel security (MLS) base adds mandatory sensitivity labeling beyond basic confinement.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is SELinux and why is it important?
Open an interactive chat with Bash
What does it mean for a process to be 'unconfined' in SELinux?
Open an interactive chat with Bash
What are the differences between Minimum, Targeted, and Strict SELinux policies?