Question 140
Original unofficial RHEL 10 RHCSA skill-check scenario: A configuration change fails because the editor saves to a read-only file owned by a service account. Which ongoing practice best prevents a recurrence?
Explanation
Correct Answer
In this RHEL 10 system administration case: A configuration change fails because the editor saves to a read-only file owned by a service account. Underlying reason: Edit authorization follows filesystem ownership and effective privileges. The most direct, approved resolution is: Request appropriate approved privilege or controlled ownership access instead of weakening file permissions globally. Confirm it by checking: The file is changed by the authorized identity and retains intended restrictive permissions. Sustain the fix by: Review sensitive config ownership after every deployment. This is the INTENDED response for the best ongoing operational safeguard. It is a knowledge-check explanation, not a verified hands-on Red Hat exam answer;
Incorrect Answers
Verify generated configuration bytes before applying them. That is not sufficient for the reported RHEL task, because edit authorization follows filesystem ownership and effective privileges.
Include stderr handling in shell monitoring templates. That is not sufficient for the reported RHEL task, because edit authorization follows filesystem ownership and effective privileges.
Validate large cross-volume migrations before cleanup. That is not sufficient for the reported RHEL task, because edit authorization follows filesystem ownership and effective privileges.