A Linux administrator is trying to remove the ACL from the file /home/user/data. txt but receives the following error message: Given the following analysis: Which of the following is causing the error message?
A.
The administrator is not using a highly privileged account.
B.
The filesystem is mounted with the wrong options.
C.
SELinux file context is denying the ACL changes.
D.
File attributes are preventing file modification.
I think it is D. With the append only attribute activated, you can only add information to the file; you cannot change it. This includes deleting or changing the ACL.
D. "File attributes are preventing file modification." It is not C: "SELinux file context is denying the ACL changes." SELinux does not discriminate: if an attribute can be set, then it can be unset. It's true that SELinux could be configured to totally disallow or selectively allow access to 'chattr', but that is not its default configuration and the question has no hint in regard to a change in SELinux policy. This can be easily demonstrated on any system using SELinux.
touch file
sudo chattr +a file
lsattr file
rm file
sudo chattr -a file
lsattr file
The correct option is C. SELinux file context is denying the ACL changes. The error message “setfacl: data.txt: operation not permitted” is caused by the SELinux file context denying the ACL changes.
C. SELinux file context is denying the ACL changes.
The file context of the file is set to user_home_t and since the file is located under the /home directory, it is most likely that the file is located in a user's home directory which is restricted by SELinux. SELinux provides Mandatory Access Control (MAC) to restrict the access of the files and processes in a Linux system.
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.XK0-005 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
POGActual
Highly Voted 2 years, 1 month agoQubert2
Most Recent 6 months, 3 weeks agoe418137
1 year, 3 months agoericsrz
1 year, 4 months agotutita
1 year, 11 months agopost20
2 years, 1 month ago