Leo at 22:30, 18 August 2023

2023-08-18T22:30:10Z

← Older revision		Revision as of 22:30, 18 August 2023
Line 1:		Line 1:

			[[SELinux]] (Security Enhanced Linux) is a Linux kernel security module which allows the system to enforce access controls. You may want to disable it on systems where you do not need this level of security.
	SELinux (Security Enhanced Linux) is a Linux kernel security module which allows the system to enforce access controls. You may want to disable it on systems where you do not need this level of security.

	== Is SElinux enabled? ==		== Is SElinux enabled? ==
Line 43:		Line 42:
	# vi /etc/selinux/config		# vi /etc/selinux/config
	}}		}}

			{{Navbox Linux}}[[Category:Linux]]
			[[Category:LinuxUtilities]]

Leo: Created page with " SELinux (Security Enhanced Linux) is a Linux kernel security module which allows the system to enforce access controls. You may want to disable it on systems where you do not need this level of security. == Is SElinux enabled? == Check the status of SELinux with `sestatus` and look for the '`SELinux status`' and '`Current mode`': {{Highlight | code = # sestatus SELinux status: enabled SELinuxfs mount: /sy..."

2023-08-18T22:28:25Z

Created page with " SELinux (Security Enhanced Linux) is a Linux kernel security module which allows the system to enforce access controls. You may want to disable it on systems where you do not need this level of security. == Is SElinux enabled? == Check the status of SELinux with <code>sestatus</code> and look for the '<code>SELinux status</code>' and '<code>Current mode</code>': {{Highlight | code = # sestatus SELinux status: enabled SELinuxfs mount: /sy..."

New page

SELinux (Security Enhanced Linux) is a Linux kernel security module which allows the system to enforce access controls. You may want to disable it on systems where you do not need this level of security.

== Is SElinux enabled? ==
Check the status of SELinux with <code>sestatus</code> and look for the '<code>SELinux status</code>' and '<code>Current mode</code>':
{{Highlight
| code = # sestatus
SELinux status: enabled
SELinuxfs mount: /sys/fs/selinux
SELinux root directory: /etc/selinux
Loaded policy name: targeted
Current mode: enforcing
Mode from config file: enforcing
Policy MLS status: enabled
Policy deny_unknown status: allowed
Memory protection checking: actual (secure)
Max kernel policy version: 33
| lang = terminal
}}
The mode tells you:

* Enforcing – SELinux is active and enforcing its policy rules.
* Permissive – SELinux permits every thing, but logs the events it would normally deny in enforcing mode.
* Disabled – SELinux is not enforcing rules or logging anything.

If SELinux is in enforcing mode, you can disable it in the next section below.

===Disabling SELinux===
To temporarily disable SELinux:{{highlight|lang=terminal|code=
## Use the setenforce command
# setenforce 0

## or, on older kernels:
# echo 0 > /selinux/enforce

## or, on newer kernels (the /selinux fs has been moved to /sys/fs/selinux)
# echo 0 > /sys/fs/selinux/enforce

}}To permanently disable SELinux:{{highlight|lang=terminal|code=
# sed -i --follow-symlinks 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/sysconfig/selinux
## or manually set SELINUX=disabled
# vi /etc/selinux/config
}}

How to disable SELinux - Revision history

Leo at 22:30, 18 August 2023