Free RHCE Network Services and Security Questions and Answers

Question 1

What is the Samba directive that limits access to systems on the example.org network?

Accepted Answer

hosts allow .example.org

Answer

In Samba's `smb.conf` configuration file, the `hosts allow` directive is used to specify which hosts or networks are permitted to connect to a Samba share. By using `.example.org`, it allows any host within the `example.org` domain to access the share. This provides a flexible and effective way to control network access based on hostnames or IP addresses.

Question 2

How do you log in to a remote host using smbclient?

Accepted Answer

smbclient //localhost/shared -U user01%pass

Answer

The `smbclient` utility is used to access Samba shares from the command line. The correct syntax involves specifying the share path as `//hostname/sharename` and providing the username and password using the `-U user%password` format. This allows for direct authentication and interaction with the shared resource, similar to an FTP client.

Question 3

What is the SELinux file type appropriate for shared Samba directories?

Accepted Answer

samba_share_t

Answer

For SELinux to permit Samba to share directories, those directories must be assigned the correct SELinux file context. The `samba_share_t` type is specifically designated for directories intended to be shared via Samba. Applying this context ensures that SELinux allows the Samba daemon to read and write to these directories, preventing access denied errors.

Question 4

What is the relevant SELinux boolean associated with the sharing of home directories on Samba?

Accepted Answer

samba_enable_home_dirs

Answer

SELinux uses booleans to control specific system behaviors and permissions. To allow Samba to share users' home directories, the `samba_enable_home_dirs` boolean must be enabled. This boolean grants Samba the necessary permissions to access and serve content from user home directories, which are typically restricted by default for security reasons.

Question 5

What command enables the SELinux boolean for anonymous FTP uploads?

Accepted Answer

setsebool -P allow_ftpd_anon_write on

Answer

The `setsebool` command is used to modify SELinux boolean values, which control specific security policies. To enable anonymous FTP uploads, the `allow_ftpd_anon_write` boolean needs to be set to `on`. The `-P` flag makes this change persistent across system reboots, ensuring the setting remains active.

RHCE - Red Hat Certified Engineer Practice Test

RHCE - Red Hat Certified Engineer Practice Test

Free RHCE Network Services and Security Questions and Answers