Enable permissive mode for SELinux troubleshooting purpose
SELinux may create problem for network service if not configured properly. So you can turn off SELinux temporarily i.e. permissive mode for SELinux. In this mode SELinux will continue its work and it will log message to system log files. But it will not block any network service or protected service.
This is great for troubleshooting purpose. For example, squid proxy server or dovecot POP3/IMAP sever known to have problem with SELinux.
You can modify the mode SELinux is running in using setenforce command. Use value 1 to put SELinux in enforcing mode. Use value 0 to put SELinux in permissive mode. Use getenforce command to find out whether SELinux is enforcing, permissive, or disabled.
Get SELinux mode
# getenforce
Output:
Enforcing
Set SELinux mode to permissive mode
# setenforce 0
# getenforce
Output:
Permissive
GUI tools for setting up SELinux mode
If you are using Fedora Core or Red Hat Enterprise Linux use system-config-securitylevel command to setup SELinux mode and other related properties. Type the following command at shell prompt:
$ system-config-securitylevel
Selinux can be disabled by passing kernel boot parameters. You need to edit grub.conf / menu.lst/ lilo.conf file.
You may also be interested in other helpful articles:
- Install Squid Proxy Server on CentOS / Redhat enterprise Linux 5
- Build a SELinux-ready Gentoo system from scratch
- Understanding SELinux ( Security-Enhanced Linux )
- Book review: SELinux by Example: Using Security Enhanced Linux
- Howto: Redhat Enterprise Linux SELinux policy guide
Discussion on This Article:
Leave a Reply
We encourage your comments, and suggestions. But please stay on topic, be polite, and avoid spam. Thank you very much for stopping by our site!
Well.what can i say but this website is amazing for open source lover like me ….this is very good website for enhancing the experiance in UNIX envirnoment.
I love this website very much.and everyday I like to visit this site to enhance my skills.
Regards
Satya
Satyendra.
If you can’t visit everyday you can subscribe our full feed - http://feeds.feedburner.com/Nixcraft-LinuxFreebsdSolarisTipsTricks or sign up for the free weekly email Newsletter, get information about all our articles, posts and other stuff via email - http://groups.google.co.in/group/nixcraft
Appreciate your post.
how do troubleshoot nfs server