An administrator notices that an application fails to write logs to /var/log/myapp while the system is in an enforcing state. The administrator suspects the mandatory security settings are causing the issue. Which action best addresses the situation while keeping the protective mechanisms intact?
Change the owner of the log directory to the application user
Place the system into a less restrictive state to allow writes
Assign a matching label to the directory so the process can write logs
Turn off mandatory controls for the directory to permit logging
Assigning a compatible label to the log directory maintains the mandatory policy while permitting the application to write logs. Changing the entire system to a less restrictive configuration removes important protections. Removing enforcement from the directory or switching to discretionary protections bypasses system-level security. Adjusting ownership addresses user-level permissions but does not override mandatory restrictions.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What does it mean to assign a matching label in this context?
Open an interactive chat with Bash
What are mandatory access controls (MAC) in operating systems?
Open an interactive chat with Bash
How does SELinux enforce mandatory access policies?