A systems administrator is having issues installing packages in a Linux system. The administrator receives the following outputs: Which of the following is the best command to fix this issue?

The correct answer is C. restorecon -R /etc/pki/ca-trust/extracted/pem. The CA bundle path is a symlink to a file under /etc/pki/ca-trust/extracted/pem, and update-ca- trust cannot create that generated bundle while SELinux is enforcing. Restoring the default SELinux contexts on that directory allows the bundle file to be created and fixes the…

Troubleshooting and Diagnostics

Question

A systems administrator is having issues installing packages in a Linux system. The administrator receives the following outputs:

Which of the following is the best command to fix this issue?

Exhibit

Options

Adnf reinstall ca-certificates
Btouch /etc/pki/tls/certs/ca-bundle.crt
Crestorecon -R /etc/pki/ca-trust/extracted/pem
Dsetenforce 0

How the community answered

(43 responses)

A
12% (5)
B
2% (1)
C
81% (35)
D
5% (2)

Explanation

The CA bundle path is a symlink to a file under /etc/pki/ca-trust/extracted/pem, and update-ca- trust cannot create that generated bundle while SELinux is enforcing. Restoring the default SELinux contexts on that directory allows the bundle file to be created and fixes the certificate verification failures during package installs.

Topics

#SELinux#restorecon#file context#PKI certificates

Community Discussion

No community discussion yet for this question.

Full XK0-006 Practice