linuxexpert-practice-labs/labs/rhcsa/10-4-selinux-modes/README.md

RHCSA 10.4: SELinux modes

Switching to permissive mode for now, and booting in permissive mode and back.

Before you start

SELinux must be enforcing when you start. The tasks end where they started, so the lab runs a small service, le-lab-watch, that notes the SELinux mode and the SELINUX= setting every second (and at every boot) for the check. Wait a few seconds between steps. Reset sets SELinux back to enforcing.

Tasks

1. Put SELinux into permissive mode until the next reboot, and make sure enforcing mode is the setting at boot: getenforce prints Permissive and sestatus shows Mode from config file: enforcing. After a reboot, getenforce prints Enforcing.
2. Make the system boot in permissive mode and reboot: getenforce prints Permissive. Then put it back to enforcing for good (SELINUX=enforcing and a reboot, or setenforce 1 as well).

Hints

• setenforce 0, getenforce, sestatus.
• SELINUX= in /etc/selinux/config; setenforce 1.