nerdexam
LPI

303-300 · Question #112

Which command is used to run a new shell for a user changing the SELinux context? (Specify ONLY the command without any path or parameters.) Solution: newrole Determine whether the given solution is…

The correct answer is A. Correct. Option A is correct because newrole is the dedicated SELinux utility that spawns a new shell session for the current user under a different SELinux security context (role, type, or level), without requiring a full logout and re-login. It is part of the policycoreutils package…

Access Control

Question

Which command is used to run a new shell for a user changing the SELinux context? (Specify ONLY the command without any path or parameters.) Solution: newrole Determine whether the given solution is correct?

Options

  • ACorrect
  • BIncorrect

How the community answered

(20 responses)
  • A
    90% (18)
  • B
    10% (2)

Explanation

Option A is correct because newrole is the dedicated SELinux utility that spawns a new shell session for the current user under a different SELinux security context (role, type, or level), without requiring a full logout and re-login. It is part of the policycoreutils package and enforces that the requesting user is authorized by SELinux policy to assume the target role before granting the new context. Since this is a true/false style question with only one solution offered, there are no distractors to rebut - the solution newrole is unambiguously the correct answer as no other standard Linux command performs this specific function. For memorization, think "new role = newrole" - the command name is a direct, literal description of its purpose: assigning the user a new SELinux role within a fresh shell.

Topics

#SELinux#Access Control#Role Management#RBAC

Community Discussion

No community discussion yet for this question.

Full 303-300 Practice