EX200 Exam QuestionsBrowse all questions from this exam

EX200 Exam - Question 94


SIMULATION -

SELinux must be running in the Enforcing mode.

Show Answer
Correct Answer:

To ensure SELinux is running in Enforcing mode, you need to follow these steps: First, check the current mode of SELinux using the command 'getenforce'. If the mode is not 'Enforcing', you should edit the SELinux configuration file to make the change permanent. Open the file '/etc/selinux/config' with a text editor, such as 'vi' or 'vim'. Within this file, find the line that starts with 'SELINUX=' and change its value to 'enforcing'. The line should read 'SELINUX=enforcing'. Save the file and exit the text editor. Finally, reboot the system to apply the changes. This will ensure that SELinux runs in Enforcing mode persistently across reboots.

Discussion

1 comment
Sign in to comment
STFN2019
Sep 25, 2021

# getenforce (check the current mode) # setenforce 1 (change the mode to enforcing) OR # vi /etc/selinux/config selinux=enforcing

ly01
Jul 14, 2024

setenforce 1 will not survive reboot, and for the exam all changes must survive reboot.