Hi all,

i just want to know how to Enable and Disable SELinux?

Thanks

you can check your SELinux Status first,

# getenforce

to Enable SELinux

# setenforce 1

to Disable SELinux

# setenforce 0

xeont wrote:you can check your SELinux Status first,

# getenforce

to Enable SELinux

# setenforce 1

to Disable SELinux

# setenforce 0

Thank you xeont

markm,

When you run,

# getenforce

and result,

Disable

you may have to EDIT /etc/selinux/config file and change SELINUX=disable to SELINUX=permissive

Code: Select all

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#       enforcing - SELinux security policy is enforced.
#       permissive - SELinux prints warnings instead of enforcing.
#       disabled - No SELinux policy is loaded.
SELINUX=permissive
# SELINUXTYPE= can take one of these two values:
#       targeted - Targeted processes are protected,
#       mls - Multi Level Security protection.
SELINUXTYPE=targeted

A Restart will required once you done it to make it effect.

SELINUX=permissive mode is only enable SELinux to log your Allows/Denials in /var/log/audit/audit.log file

It will not Force SELinux Policies on your system. I guess its a good way to start. This will be helpful making Local Policies if you need any on your system.

Regards,
Xeont

setenforce 0

Does not disable SELinux, it puts it into permissive mode.

Here is a very old blog that explains this.

http://danwalsh.livejournal.com/3144.html

While the _entry_ might be a little old, the _blog_ remains to be one (if not the most) authoritative source of wisdom with regards to anything related SELinux.

Hey, guys, plz help me... When I go to etc\ I can't find selinux... Or my wishes going crazy xD

Hi Dominykas,

Which Linux Distribution are you using?

Try,

Code: Select all

cd /etc/selinux