XK0-006: CompTIA Linux+Demo

Question

A Linux administrator has just completed configuration of passwordless SSH authentication between two nodes. However, during test validation, the remote host requests a password. Given the following logs:

Question Image

Which of the following is the most likely cause of this problem?

A The SELinux policy is incorrectly targeting the unconfined_u context.
B The administrator forgot to restart the SSHD after creating the authorized_keys file.
C The authorized_keys file has the incorrect root permissions assigned.
D The authorized_keys file does not have the correct security context to match SELinux policy.

Explanation

SELinux is enforcing and the audit denial explicitly shows the sshd_t domain being blocked from reading authorized_keys, whose target type is home_root_t. SSH authorization files must have the SELinux file context permitted for SSH home content (commonly ssh_home_t); an incorrect label prevents sshd from reading the key even when normal Unix ownership and mode are correct.

Learn more

SELinux User's and Administrator's Guide — SELinux file name transitions

XK0-006: CompTIA Linux+Demo

AstroTutor

Notes

Readiness

QuestionQ13

Community Discussion