RHCE SELinux Administration

Question 1

Which command displays the current SELinux enforcement mode?

Accepted Answer

Both B and C

Answer

seinfo

Answer

getenforce

Answer

sestatus

Question 2

What SELinux mode allows policy violations but logs them without blocking?

Accepted Answer

Permissive

Answer

Enforcing

Answer

Disabled

Answer

Audit

Question 3

Which command temporarily sets SELinux to permissive mode without a reboot?

Accepted Answer

Both A and B

Answer

setenforce 0

Answer

setenforce Permissive

Answer

semodule -P

Question 4

Which file must be edited to make SELinux mode changes persistent across reboots?

Accepted Answer

/etc/selinux/config

Answer

/etc/selinux/policy.conf

Answer

/etc/sysconfig/selinux is a symlink to this

Answer

/etc/sysconfig/selinux

Question 5

What command displays the SELinux context of files in the current directory?

Accepted Answer

ls -Z

Answer

ls -l

Answer

stat --selinux

Answer

getfattr -Z

Question 6

Which command restores default SELinux file contexts recursively on `/var/www/html`?

Accepted Answer

restorecon -Rv /var/www/html

Answer

chcon -R /var/www/html

Answer

semanage fcontext /var/www/html

Answer

fixfiles /var/www/html