What are possible different modes in which the SELinux will be working in my Red Hat Enterprise Linux server version 6.x and how can I figure out which is my current mode?

SELinux can be run in any one of the following mode at any given time:

enforcing : SELinux security policy is enforced.

permissive : SELinux prints warnings instead of enforcing.

disabled : SELinux is fully disabled.

The following command enables you to see current status of SELinux:

# sestatus

SELinux is very effective at controlling what a process can do, and mitigating bugs in applications. In any multi-tenant environment, I would not run a system without SELinux protection. Secure Virtualization with libvirt and VM's relies on SELinux. Openshift Relies on SELinux. Tools like Secure Containes also rely on SELinux for protection.

In any multi-tenant environment, I would not run a system without SELinux protection?


_______________________
bella