A system administrator is investigating why user3 cannot log in using SSH to one of the servers. An attempt to log in results in the following: Which of the following commands should the systems admin

Running 'restorecon /bin/rssh' restores the SELinux security context label on the rssh binary to the value defined by the active policy. If the context was set incorrectly - for example after a manual file copy or an incomplete package update - SELinux will deny execution of rssh during SSH login, and restorecon corrects this without altering the user's account or shell assignment.

'passwd -u user3' unlocks a password-locked account, which is unrelated to the rssh shell binary's SELinux context that is causing the login denial.

'usermod -s /bin/sh user3' replaces the user's shell entirely rather than fixing the underlying SELinux context problem on /bin/rssh, and may change intended access restrictions.

'setfacl' modifies POSIX access control lists, which is a separate permission mechanism from SELinux context labels and would not resolve an SELinux denial on the rssh binary.