SELinux management - Revision history

Luc Morissette at 12:46, 22 July 2011

2011-07-22T12:46:45Z

← Older revision		Revision as of 08:46, 22 July 2011
Line 43:		Line 43:
	SELINUXTYPE=targeted		SELINUXTYPE=targeted

	Reboot or use the setenforce command:<br>		Reboot or use the setenforce command:<br>
	<pre>shutdown -r now</pre>		<pre>shutdown -r now
			or
			setenforce 0
			</pre>

Luc Morissette: Modified slightly so that customers don'

2011-07-22T12:45:24Z

Modified slightly so that customers don'

← Older revision		Revision as of 08:45, 22 July 2011
Line 43:		Line 43:
	SELINUXTYPE=targeted		SELINUXTYPE=targeted

	Reboot		Reboot or use the setenforce command:<br>
	<pre>shutdown -r now</pre>		<pre>shutdown -r now</pre>

Cbilodeau: fix SELinux commands to disable and set to permissive

2010-07-08T14:39:35Z

fix SELinux commands to disable and set to permissive

← Older revision		Revision as of 10:39, 8 July 2010
Line 14:		Line 14:
	Policy from config file: targeted		Policy from config file: targeted

			<br>

	== How to disable SELinux<br> ==		== How to disable SELinux<br> ==

	=== ~~Disable~~ SELinux ~~now~~<br> ===		=== Set SELinux to permissive (not truly disabled)<br> ===

	setenforce 0		setenforce 0

	~~Warning: SELinux will start again if configuration is not changed.<br>~~

	<br>		<br>

	=== Disable SELinux ~~at next reboot~~<br> ===		=== Disable SELinux entirely<br> ===

	Edit the file:<br>		Edit the file:<br>

	vi /etc/selinux/config>		vi /etc/selinux/config

	Set the line to SELINUX=disabled <br>		Set the line to SELINUX=disabled <br>
Line 38:		Line 37:
	# permissive - SELinux prints warnings instead of enforcing.		# permissive - SELinux prints warnings instead of enforcing.
	# disabled - SELinux is fully disabled.		# disabled - SELinux is fully disabled.
	SELINUX=disabled <------ Line to modify		SELINUX=disabled <------ Line to modify
	# SELINUXTYPE= type of policy in use. Possible values are:		# SELINUXTYPE= type of policy in use. Possible values are:
	# targeted - Only targeted network daemons are protected.		# targeted - Only targeted network daemons are protected.
	# strict - Full SELinux protection.		# strict - Full SELinux protection.
	SELINUXTYPE=targeted		SELINUXTYPE=targeted

			Reboot
			<pre>shutdown -r now</pre>

Cbilodeau: fix format

2010-02-26T20:22:11Z

fix format

← Older revision		Revision as of 16:22, 26 February 2010
Line 3:		Line 3:
	The following command will retreive the SELinux status of your system (output may vary):<br>		The following command will retreive the SELinux status of your system (output may vary):<br>

	~~ ~~ sestatus~~<br>~~		sestatus

	exemple from CentOS 5.3<br>		exemple from CentOS 5.3<br>

	~~ ~~ SELinux status: enabled~~<br> ~~ SELinuxfs mount: /selinux~~<br> ~~ Current mode: permissive~~<br> ~~ Mode from config file: permissive~~<br> ~~ Policy version: 21~~<br> ~~ Policy from config file: targeted~~<br><br>~~		SELinux status: enabled
			SELinuxfs mount: /selinux
			Current mode: permissive
			Mode from config file: permissive
			Policy version: 21
			Policy from config file: targeted


	== How to disable SELinux<br> ==		== How to disable SELinux<br> ==
Line 13:		Line 19:
	=== Disable SELinux now<br> ===		=== Disable SELinux now<br> ===

	~~ ~~ setenforce 0~~<br>~~		setenforce 0

	Warning: SELinux will start again if configuration is not changed.<br>		Warning: SELinux will start again if configuration is not changed.<br>
Line 23:		Line 29:
	Edit the file:<br>		Edit the file:<br>

	~~ ~~ vi /etc/selinux/config~~<br><br~~>		vi /etc/selinux/config>

	Set the line to SELINUX=disabled <br>		Set the line to SELINUX=disabled <br>

	~~ ~~ # This file controls the state of SELinux on the system.~~<br> ~~ # SELINUX= can take one of these three values:~~<br> ~~ # enforcing - SELinux security policy is enforced.~~<br> ~~ # permissive - SELinux prints warnings instead of enforcing.~~<br> ~~ # disabled - SELinux is fully disabled.~~<br> ~~ SELINUX=disabled                                                            <---- ~~line~~ to modify~~<br> ~~ # SELINUXTYPE= type of policy in use. Possible values are:~~<br> ~~ # targeted - Only targeted network daemons are protected.~~<br> ~~ # strict - Full SELinux protection.~~<br> ~~ SELINUXTYPE=targeted~~<br><br>~~		# This file controls the state of SELinux on the system.
			# SELINUX= can take one of these three values:
			# enforcing - SELinux security policy is enforced.
			# permissive - SELinux prints warnings instead of enforcing.
			# disabled - SELinux is fully disabled.
			SELINUX=disabled <------ Line to modify
			# SELINUXTYPE= type of policy in use. Possible values are:
			# targeted - Only targeted network daemons are protected.
			# strict - Full SELinux protection.
			SELINUXTYPE=targeted

Cbilodeau: creation

2010-02-26T20:19:54Z

creation

New page

== How to get SELinux status ==

The following command will retreive the SELinux status of your system (output may vary): 

  sestatus 

exemple from CentOS 5.3 

  SELinux status: enabled   SELinuxfs mount: /selinux   Current mode: permissive   Mode from config file: permissive   Policy version: 21   Policy from config file: targeted 

== How to disable SELinux ==

=== Disable SELinux now ===

  setenforce 0 

Warning: SELinux will start again if configuration is not changed. 

 

=== Disable SELinux at next reboot ===

Edit the file: 

  vi /etc/selinux/config 

Set the line to SELINUX=disabled 

  # This file controls the state of SELinux on the system.   # SELINUX= can take one of these three values:   # enforcing - SELinux security policy is enforced.   # permissive - SELinux prints warnings instead of enforcing.   # disabled - SELinux is fully disabled.   SELINUX=disabled                                                            <---- line to modify   # SELINUXTYPE= type of policy in use. Possible values are:   # targeted - Only targeted network daemons are protected.   # strict - Full SELinux protection.   SELINUXTYPE=targeted