Red Hat Enterprise Linux 5 Administration Unleashed

Selecting an SELinux Mode 465CAUTIONIf using setenforce, be sure to change the mode in /etc/selinux/config as well sothe change will persist after a reboot.23FIGURE 23.1Selecting the SELinux ModeThe SELinux mode used at boot time can be set in the /etc/selinux/config file. As theroot user, set the SELINUX option to enforcing, permissive, or disabled such as thefollowing:SELINUX=enforcingAfter the reboot, verify the mode was changed with the sestatus command. The outputshould look similar to Listing 23.1.LISTING 23.1SELinux Status with sestatusSELinux status:enabledSELinuxfs mount:/selinuxCurrent mode:enforcingMode from config file:enforcingPolicy version: 21Policy from config file: targeted