問題文
A policy requires that a specific operator may restart one service but must not gain a general administrative shell. Which configuration expresses this?
選択肢
- A delegation entry that names the operator and permits only the exact command that restarts that service, written to a file in the delegation directory.
- Adding the operator to the administrative group, since group membership can be restricted to a single command.
- Setting the user identifier bit on the service control command, which causes it to run with administrative privileges for any user who can execute it, and restricting execution to the operator by file permissions so that only that one command is delegated.
- Granting the operator write access to the unit file so they can trigger a reload.