SELinux: Checking Status and Disabling

Checking if SELinux is enabled:

1. Using Command Line:

   • Open a terminal or SSH session.

   • Run the following command:

     sestatus

   • If SELinux is enabled, you will see output similar to:

     SELinux status: enabled

   • If SELinux is disabled, you will see output similar to:

     SELinux status: disabled

2. Checking Configuration File:

   • SELinux configuration file is usually located at /etc/selinux/config.

   • Open the configuration file using a text editor like nano or vi.

   • Look for the line:

     codeSELINUX=enforcing

     If it's set to enforcing, SELinux is enabled. If set to disabled, it's disabled.

Disabling SELinux:

1. Temporary Disable:

   • To temporarily disable SELinux until the next system reboot, run:

     sudo setenforce 0

2. Permanently Disable:

   • Open the SELinux configuration file /etc/selinux/config.

   • Change the SELINUX parameter to disabled:

     SELINUX=disabled

   • Save the changes and exit the text editor.

   • Reboot the system for the changes to take effect.

Important Notes:

• Always ensure appropriate backups before making significant changes to system configurations.