Pass the RedHat RHCE RH302 Questions and answers with ValidTests

According to question, log server is already configured. We have to configure the mail, web and dns server for log redirection.

In mail, web and dns server:

1.vi /etc/syslog.conf

mail.*@logserveraddress

2.service syslog restart

mail is the facility and * means the priority. It sends logs of mail services into log server.

Do the following steps as:

vi /etc/auto.master

/mnt/etc/auto.misc--timeout=50

vi /etc/auto.misc

data-rw,soft,intrserver1.example.com:/data

service autofs restart

chkconfig autofs on

When you mount the other filesystem, you should unmount the mounted filesystem, Automount feature of linux helps to mount at access time and after certain seconds, when user unaccess the mounted directory, automatically unmount the filesystem.

/etc/auto.master is the master configuration file for autofs service. When you start the service, it reads the mount point as defined in /etc/auto.master.

Do the following steps as:

1.useradd eric

Very tricky question given to you that this user should not belongs to sysadmin group.

By default user1 can remove user2’s files due to directory permission to group member. We can prevent of deleting files from others users using Sticky Bits.

chmod o+t /data

Verify /data: ls -ld /data

You will get: drwxrwx—T

When user creates the file/directory, user owner will be user itself and group owner will be the primary group of the user.

There is one Special Permission SGID , when you set the SGID bit on directory,When users creates the file/directory automatically owner group will be same as a parent.

chmod g+s /data

Verify using: ls -ld /data

You will get: drwxrws---

Do the following steps as:

1.chgrp sysusers /storage

2.Verify using ls -ld /storage command. You should get like

drwxr-x--- 2 root sysusers 4096 Mar 16 17:59 /storage

chgrp command is used to change the group ownership of particular files or directory.

Another way you can use the chown command.

chown root:sysusers /storage

Do the following steps as:

1.rpm –ivh ftp://server1.example.com/pub/zsh-*

2.Package will install

rpm command is used to install, update and remove the package, -i means install, -v means verbose and -h means display the hash mark.

Do the following steps as:

1.chgrp sysadmin /data

2.Verify using ls -ld /data command. You should get like

drwxr-x--- 2 root sysadmin 4096 Mar 16 17:59 /data

chgrp command is used to change the group ownership of particular files or directory.

Another way you can use the chown command.

chown root:sysadmin /data

Document directive is used in apache configuration file to specify the directory where all web site related documents are. According to question eric user should able to write into the Document root directory.

Better set the permission using ACL (Access Control List), to apply the permission using acl needs to mount the filesystem with acl options. Example in above answer documentroot is in /var and /var is mounting separate file system so needs to mount the /var file system with acl option.

vi /etc/fstab

LABEL=/var/varext3defaults 1 1

mount –o remount /var

setfacl –m u:eric:rwx /var/www/example

getfacl /var/www/example

getfacl and setfacl two commands used to maintain the permission through acl. setfacl is used to set the permission on file/directory, getfacl is used to display the permission of file/directory.

Do the following steps as:

1.vi /etc/squid/squid.conf

#detault:

http_port8080

#Recommended minimum configuration:

# Near the src acl src section

acl allownet src 192.168.0.0/255.255.255.0

acl denynet src 192.168.1.0/255.255.255.0

#Default:

# http_access deny all

#Under Herehttp_access allow allownet

http_access deny denynet

2.service squid start

3.chkconfig squid on

squid is a proxy caching server, using squid we can share the internet, block the internet, to certain network. First we should define the port for squid, the standard port for squid is 3128. We can run squid on different port by specifying http_port portnumber.

To block or allow the Internet access to hosts, we should create the acl (Access Control List). In this file we can specify only the IP address.

Example: acl aclname src IP/NetmaskAfter creating acl we can block or allow the internet to specified acl.

http_access allow | deny alcname