nerdexam
LPI

117-303 · Question #86

An unprivileged user issued a command which produced the following log message: avc: denied { getattr } for pid=984 exe=/usr/bin/vim path=/etc/shadow dev=03:01 ino=134343 scontext=hugh:user_r:user_t…

The correct answer is A. User hugh was not running in a security context that permitted reading the file. See the full explanation below for the reasoning.

Question

An unprivileged user issued a command which produced the following log message: avc: denied { getattr } for pid=984 exe=/usr/bin/vim path=/etc/shadow dev=03:01 ino=134343 scontext=hugh:user_r:user_t tcontext=system_u:object_r:shadow_t tclass=file What does the message mean?

Options

  • AUser hugh was not running in a security context that permitted reading the file.
  • BUser hugh only needs to switch to the object_r role in order to edit /etc/shadow.
  • CThe security context for hugh is misconfigured and needs access to read any system file.
  • DUser hugh was not running in a security context that permitted writing to the file.

How the community answered

(64 responses)
  • A
    80% (51)
  • B
    11% (7)
  • C
    6% (4)
  • D
    3% (2)

Community Discussion

No community discussion yet for this question.

Full 117-303 Practice