This is an old revision of the document!
Set Enforcing And Permissive Modes For Selinux
General Information
SELinux is required to be enabled on the exam. Do NOT disable it permanently. (Temporarily setting permissive is ok for troubleshooting)
SELinux Modes
Modes
- Enforcing ⇒ SELinux is enabled and will restrict.
- Permissive ⇒ SELinux is enabled and will log only. (Will not actually restrict anything)
- Disabled ⇒ SELinux is disabled and will not log or restrict.
Configure the SELinux Mode
Get current SELinux mode
getenforce OR sestatus
Temporary: Set Permissive (Monitor and Report)
setenforce 0
Temporary: Set SELinux to Enforce
setenforce 1
Persistent: SELinux Config File
/etc/selinux/config SELINUX=enforcing