linux_wiki:set_enforcing_and_permissive_modes_for_selinux

Set Enforcing And Permissive Modes For Selinux

General Information

SELinux is required to be enabled on the exam. Do NOT disable it permanently. (Temporarily setting permissive is ok for troubleshooting)


Modes

  • Enforcing ⇒ SELinux is enabled and will restrict.
  • Permissive ⇒ SELinux is enabled and will log only. (Will not actually restrict anything)
  • Disabled ⇒ SELinux is disabled and will not log or restrict.

Get current SELinux mode

getenforce
OR
sestatus


Temporary: Set Permissive (Monitor and Report)

setenforce 0


Temporary: Set SELinux to Enforce

setenforce 1


Persistent: SELinux Config File

/etc/selinux/config
 
SELINUX=enforcing

  • linux_wiki/set_enforcing_and_permissive_modes_for_selinux.txt
  • Last modified: 2019/05/25 23:50
  • (external edit)