Exam SK0-005 topic 1 question 58 discussion

The getenforce command is used to check the current status of SELinux (Security-Enhanced Linux) on a system. The output "Enforcing" indicates that SELinux is currently in enforcing mode, which may restrict certain operations. To configure MySQL successfully, the administrator can temporarily set SELinux to permissive mode, which allows policy violations to be logged but not enforced. The correct command for this is: B. setenforce permissive This command will set SELinux to permissive mode, allowing the administrator to identify and address any SELinux policy violations related to MySQL without enforcing strict policies. After configuring MySQL, it's generally a good practice to set SELinux back to enforcing mode for enhanced security, using the command: C. setenforce 1 This will set SELinux back to enforcing mode

A. setenforce 0. This command sets SELinux to "Permissive" mode. In Permissive mode, SELinux does not deny access but logs AVC (Access Vector Cache) messages. It's useful for troubleshooting and understanding how SELinux would behave without actually enforcing any denials.

The answer is A Setenforce 0: to change to permissive mode Setenforce 1: to change to enforcing mode

"setenforce 0" sets SELinux to "disabled" mode, which completely turns off SELinux enforcement. "setenforce permissive" sets SELinux to "permissive" mode, which allows SELinux to log policy violations but does not block any actions. "setenforce 1" sets the SELinux enforcement to "enforcing" mode, which means SELinux policy rules are actively enforced. "setenforce disabled" sets the SELinux enforcement to "disabled" mode, which means SELinux policy rules are not enforced at all, and the system falls back to standard Unix permissions.