CompTIACompTIA
XK0-005 · Question #1201
XK0-005 Question #1201: Real Exam Question with Answer & Explanation
The correct answer is C: touch /.autorelabel && reboot. As the .autorelabel file will force a RECURSIVE check of the whole system on boot whereas answer D lacks the -R flag that restorecon needs to work RECURSIVELY over the whole filesystem. Without -R it just works on a single file/dir.
Security
Question
A Linux administrator is restoring the SELinux contexts on an entire system. Which of the following commands is the BEST option to complete this task?
Options
- Asetenforce 0 && reboot
- Bsetfacl -bR / && reboot
- Ctouch /.autorelabel && reboot
- Drestorecon / && reboot
Explanation
As the .autorelabel file will force a RECURSIVE check of the whole system on boot whereas answer D lacks the -R flag that restorecon needs to work RECURSIVELY over the whole filesystem. Without -R it just works on a single file/dir.
Topics
#SELinux#File Contexts#System Relabeling#Linux Administration
Community Discussion
No community discussion yet for this question.