1
00:00:00,000 --> 00:00:10,000
In this video, we'll talk about mandatory access control.

2
00:00:10,000 --> 00:00:14,000
So default Linux access control is discretionary.

3
00:00:14,000 --> 00:00:17,000
We'll be talking about permissions, for instance.

4
00:00:17,000 --> 00:00:20,000
And that means that every user can grant permissions to other users.

5
00:00:20,000 --> 00:00:23,000
There is no centralized control.

6
00:00:23,000 --> 00:00:26,000
Also, standard Linux security is a collection of tools

7
00:00:26,000 --> 00:00:30,000
that focus on specific areas of the operating systems.

8
00:00:30,000 --> 00:00:32,000
It has been developed as such throughout the years,

9
00:00:32,000 --> 00:00:37,000
and that is because of the very old legacy of Unix behind Linux.

10
00:00:37,000 --> 00:00:39,000
And because of this approach,

11
00:00:39,000 --> 00:00:42,000
it leaves Linux vulnerable for specific types of problems,

12
00:00:42,000 --> 00:00:45,000
like zero-day exploits, for instance.

13
00:00:45,000 --> 00:00:49,000
And that is why mandatory access control is needed.

14
00:00:49,000 --> 00:00:53,000
Mandatory access control offers an overall approach to security,

15
00:00:53,000 --> 00:00:56,000
where something that hasn't been specifically allowed will be denied,

16
00:00:56,000 --> 00:01:00,000
and there is nothing that the user can do to change it.

17
00:01:00,000 --> 00:01:03,000
There are two main solutions for mandatory access control,

18
00:01:03,000 --> 00:01:06,000
and these are SELinux and AppArmor.

19
00:01:06,000 --> 00:01:08,000
In this course and for the Linux Plus exam,

20
00:01:08,000 --> 00:01:12,000
you need to know about SELinux, so that is what comes up next.