SELinux - Determine if SELinux is enforcing permissive or disabled

by
Jeremy Canfield |
Updated: February 14 2022
| SELinux articles
SELinux has 3 modes.
- Enforcing
- Disabled
- Permissive (running but not enforcing)
The getenforce command can be used to determine if SELinux is enforcing, disabled, or permissive.
~]$ getenforce
Enforcing
Likewise, the sestatus command can be used as well.
~]$ sestatus
SELinux status: enabled
SELinuxfs mount: /sys/fs/selinux
SELinux root directory: /etc/selinux
Loaded policy name: targeted
Current mode: enforcing
Mode from config file: enforcing
Policy MLS status: enabled
Policy deny_unknown status: allowed
Memory protection checking: actual (secure)
Max kernel policy version: 33
Did you find this article helpful?
If so, consider buying me a coffee over at