Enable/Disable/Status

Is SELinux Installed?

The following Operating Systems include SELinux by default

• Red Hat Enterprise Linux 4+
• Fedora 2+
• Hardened Ubuntu
• Hardened Gentoo

It is also available for Debian as an add-on.

How do I know if SELinux is on?

If you use Red Hat Enterprise Linux or Fedora it is enabled by default. To see whether it is actively enforcing the policy you can run getenforce:

[root@localhost ~]# getenforce
Enforcing

If it says Enforcing (as above) your system is being protected by SELinux. If it says permissive SELinux is enabled but is only logging failed accesses, not denying them. If it says Disabled then SELinux is not enabled on your system.

Tools

• getenforce will show if SELinux is Enforcing, Permissive, or Disabled.

• setenforce modifies if SELinux is running or not.

Try it!

vagrant up tutorial
vagrant ssh tutorial

More Tutorials

• File and Process Contexts: Learn how SELinux labels files and processes

Portions of this page's content are copied from this page for non-commercial, education purposes.