XK0-004 · Question #402
An administrator installs a popular virtualization hypervisor on a Linux workstation. The software runs but generates a lot of AVC errors in the var/log/audit/audit .log file. Rather than address…
The correct answer is A. Getsebool F. Setsebool. AVC (Access Vector Cache) errors in /var/log/audit/audit.log are SELinux access denial messages. Rather than disabling SELinux entirely, the administrator should use 'getsebool -a | grep virt' to locate relevant SELinux boolean settings for virtualization software, then use…
Question
An administrator installs a popular virtualization hypervisor on a Linux workstation. The software runs but generates a lot of AVC errors in the var/log/audit/audit .log file. Rather than address each AVC error as it appears, which of the following should the administrator run to locate and enable a comprehensive setting to allow use of the virtualization software? (Select TWO).
Options
- AGetsebool
- BSetfacl
- CGetenforce
- DGetfacl
- ESetenforce
- FSetsebool
How the community answered
(26 responses)- A81% (21)
- B4% (1)
- C4% (1)
- D12% (3)
Explanation
AVC (Access Vector Cache) errors in /var/log/audit/audit.log are SELinux access denial messages. Rather than disabling SELinux entirely, the administrator should use 'getsebool -a | grep virt' to locate relevant SELinux boolean settings for virtualization software, then use 'setsebool -P <boolean_name> on' to persistently enable the appropriate boolean (e.g., virt_use_comm). This grants a scoped policy exception without modifying global enforcement.
Topics
Community Discussion
No community discussion yet for this question.