Product SiteDocumentation Site

9.4.5. SELinux Modes

SELinux has three modes:
Use the /usr/sbin/setenforce command to change between enforcing and permissive mode. Changes made with /usr/sbin/setenforce do not persist across reboots. To change to enforcing mode, as the Linux root user, run the /usr/sbin/setenforce 1 command. To change to permissive mode, run the /usr/sbin/setenforce 0 command. Use the /usr/sbin/getenforce command to view the current SELinux mode.
Persistent mode changes are covered in Section 9.4.4, “Enabling and Disabling SELinux”.