During a troubleshooting session, you need the system to keep recording SELinux Access Vector Cache (AVC) messages without blocking any actions so that applications can continue running. Which SELinux state should you switch the server to?
Permissive is the state in which SELinux loads and evaluates the policy, labels objects, and writes AVC messages to the audit log, but it does not deny access. This lets administrators gather information about policy violations while avoiding service interruptions.
Enforcing actively blocks operations that violate policy, which would interrupt the application you are testing. Disabled turns SELinux off entirely; it neither enforces the policy nor records AVC denials and can leave files unlabeled, complicating re-enablement. Targeted is a policy type that defines which domains are confined; it is not an SELinux state.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the purpose of the Permissive state in SELinux?
Open an interactive chat with Bash
How does the Enforcing state differ from the Permissive state in SELinux?
Open an interactive chat with Bash
What happens when SELinux is set to Disabled?
Open an interactive chat with Bash
CompTIA Linux+ XK0-006 (V8)
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access