WEBVTT

00:01.800 --> 00:08.820
In this movie you're going to be taking a look at Lee Bell's otherwise known as security contexts.

00:08.820 --> 00:20.240
Let's begin if you remember what I told you only a few lessons ago SC Linux is all about the labels.

00:20.460 --> 00:29.010
Labels are added to all System objects files processes use ask directories everything gets a label each

00:29.070 --> 00:38.130
object can only have one label and every bell comprises the following four values user row type and

00:38.130 --> 00:42.570
level to view the label for different objects.

00:42.570 --> 00:50.580
All we need to do is tack on the option dash capital Z to most of the common commands that we already

00:50.580 --> 00:55.580
know for example to view the security context for my user account.

00:55.590 --> 01:00.230
All I have to do besides dash capital Zi for a file.

01:00.240 --> 01:03.770
I can go out and say Alice Rosa on Etsy.

01:03.960 --> 01:05.820
Let's use a group.

01:06.240 --> 01:12.050
And for my current vast process I can say P.S. dash Z.

01:12.180 --> 01:20.320
If we take a close look we can see that each of these commands gives us for cool on separated values.

01:20.550 --> 01:31.200
These values make up the SC Linux security context the first value is the user the next value is the

01:31.200 --> 01:32.820
row.

01:32.880 --> 01:35.130
After that we have the tie.

01:36.030 --> 01:39.100
And lastly we have the level.

01:39.690 --> 01:45.240
Most of the time we really use the level.

01:45.240 --> 01:56.820
So every object on the system gets labelled with a security context and this labels of used by the policy

01:56.880 --> 02:01.530
to make access control decisions and the next lesson.

02:01.530 --> 02:04.560
If you're going to take a look at policy types.

02:04.560 --> 02:05.100
Thank you.