LFCS · Question #206
SELinux has just been installed on a Linux system and the administrator wants to use SELinux in permissive mode in order to audit the various services on the system. What command will switch SELinux…
The correct answer is A. setenforce 0. This question asks for the command to switch SELinux into permissive mode to audit system services.
Question
Options
- Asetenforce 0
- B/etc/init.d/selinux stop
- Cselinux passive
- D/etc/init.d/selinux startpassive
How the community answered
(23 responses)- A87% (20)
- B4% (1)
- D9% (2)
Why each option
This question asks for the command to switch SELinux into permissive mode to audit system services.
The `setenforce 0` command immediately switches SELinux from enforcing to permissive mode, allowing all actions to proceed but logging any policy violations, which is ideal for auditing without blocking operations. To switch to enforcing mode, `setenforce 1` would be used.
/etc/init.d/selinux stop is an outdated init script command to disable SELinux entirely, which is different from permissive mode where policies are still audited.
selinux passive is not a standard command or option for configuring SELinux modes.
/etc/init.d/selinux startpassive is not a standard command or option for configuring SELinux modes.
Concept tested: SELinux mode management (setenforce)
Source: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/using_selinux/changing-selinux-modes_using-selinux
Topics
Community Discussion
No community discussion yet for this question.