Bootstrap FreeKB - SELinux - Determine if SELinux is enforcing permissive or disabled
SELinux - Determine if SELinux is enforcing permissive or disabled

Updated:   |  SELinux articles

SELinux has 3 modes.

  • Enforcing
  • Disabled
  • Permissive (running but not enforcing)

 

The getenforce command  can be used to determine if SELinux is enforcing, disabled, or permissive.

~]$ getenforce
Enforcing

 

Likewise, the sestatus command can be used as well.

~]$ sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   enforcing
Mode from config file:          enforcing
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Memory protection checking:     actual (secure)
Max kernel policy version:      33

 




Did you find this article helpful?

If so, consider buying me a coffee over at Buy Me A Coffee



Comments


Add a Comment


Please enter bb8f9a in the box below so that we can be sure you are a human.