SELinux: checking status and disabling

Checking if SELinux is enabled:

  1. Using Command Line:

    • Open a terminal or SSH session.

    • Run the following command:

      sestatus
    • If SELinux is enabled, you will see output similar to:

      SELinux status: enabled
    • If SELinux is disabled, you will see output similar to:

      SELinux status: disabled
  2. Checking Configuration File:

    • SELinux configuration file is usually located at /etc/selinux/config.

    • Open the configuration file using a text editor like nano or vi.

    • Look for the line:

      codeSELINUX=enforcing

      If it's set to enforcing, SELinux is enabled. If set to disabled, it's disabled.

Disabling SELinux:

  1. Temporary Disable:

    • To temporarily disable SELinux until the next system reboot, run:

      sudo setenforce 0
  2. Permanently Disable:

    • Open the SELinux configuration file /etc/selinux/config.

    • Change the SELINUX parameter to disabled:

      SELINUX=disabled
    • Save the changes and exit the text editor.

    • Reboot the system for the changes to take effect.

Important Notes:

  • Always ensure appropriate backups before making significant changes to system configurations.

Last updated