LFCS Question #206: Real Exam Question with Answer & Explanation

Question

SELinux has just been installed on a Linux system and the administrator wants to use SELinux in permissive mode in order to audit the various services on the system. What command will switch SELinux into permissive mode?

Options

• Asetenforce 0
• B/etc/init.d/selinux stop
• Cselinux passive
• D/etc/init.d/selinux startpassive

Explanation

This question asks for the command to switch SELinux into permissive mode to audit system services.

Common mistakes.

• B. /etc/init.d/selinux stop is an outdated init script command to disable SELinux entirely, which is different from permissive mode where policies are still audited.
• C. selinux passive is not a standard command or option for configuring SELinux modes.
• D. /etc/init.d/selinux startpassive is not a standard command or option for configuring SELinux modes.

Concept tested. SELinux mode management (setenforce)

Reference. https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/using_selinux/changing-selinux-modes_using-selinux

No community discussion yet for this question.