Examine the current SELinux status:
sestatus
SELinux status: enabled
SELinuxfs mount:
/selinux Current mode: enforcing
Mode from config file: permissive Policy version:
26
Police from config file: targeted
You have to meet these requirements:
1) Network services must run in a confined domain.
2) The guest user must be confined.
3) The guest user must not be allowed from using the su command.
4) Access to files and directories must be granted based only of the SELinux contexts.
5) The SELinux configuration must be persistent across system restarts.
6) Users must be able to publish private HTML content.
You issued these commands:
setenforce enforcing
semanage login -d -s guest_u guest
setsebool -P httpd_enabled_homedirs on
Which requirements do you meet?
A.
1,2,3,6
B.
1,2,3,4,6
C.
1,2,3,4, 5,6
D.
1,2,3, 5,6
E.
2,3,4,5,6
F.
1,6
C but not 100%
I think E not sure
We have initrc_t and kernel_t are unconfined domain, I think network service running in this domain.
A different posibility, semanage login -d is to delete guest_u from guest, then guest will belong to unconfined_u. If so 2 not correct. And anwser will be F.