SELinux management

Managing SELinux on a TelcoBridges host: checking the current status, and changing enforcement mode permanently or for the current session.

How to get SELinux status

The following command will retreive the SELinux status of your system (output may vary):

sestatus

exemple from CentOS 5.3

SELinux status: enabled
SELinuxfs mount: /selinux
Current mode: permissive
Mode from config file: permissive
Policy version: 21
Policy from config file: targeted

How to disable SELinux

Set SELinux to permissive (not truly disabled)

setenforce 0

Disable SELinux entirely

Edit the file:

vi /etc/selinux/config

Set the line to SELINUX=disabled

1. This file controls the state of SELinux on the system.

2. SELINUX= can take one of these three values:

3. enforcing - SELinux security policy is enforced.

4. permissive - SELinux prints warnings instead of enforcing.

5. disabled - SELinux is fully disabled. SELINUX=disabled <------ Line to modify

6. SELINUXTYPE= type of policy in use. Possible values are:

7. targeted - Only targeted network daemons are protected.

8. strict - Full SELinux protection. SELINUXTYPE=targeted

Reboot or use the setenforce command:

shutdown -r now
or
setenforce 0