Set Enforcing And Permissive Modes For Selinux

General Information

SELinux is required to be enabled on the exam. Do NOT disable it permanently. (Temporarily setting permissive is ok for troubleshooting)

Modes

• Enforcing ⇒ SELinux is enabled and will restrict.
• Permissive ⇒ SELinux is enabled and will log only. (Will not actually restrict anything)
• Disabled ⇒ SELinux is disabled and will not log or restrict.

Get current SELinux mode

getenforce
OR
sestatus

Temporary: Set Permissive (Monitor and Report)

setenforce 0

Temporary: Set SELinux to Enforce

setenforce 1

Persistent: SELinux Config File

/etc/selinux/config
 
SELINUX=enforcing