50.2.7. Enable or Disable SELinux
Important
Changes you make to files while SELinux is disabled may give them an unexpected security label, and new files will not have a label. You may need to relabel part or all of the file system after re-enabling SELinux.
From the command line, you can edit the
/etc/sysconfig/selinux
file. This file is a symlink to /etc/selinux/config
. The configuration file is self-explanatory. Changing the value of SELINUX
or SELINUXTYPE
changes the state of SELinux and the name of the policy to be used the next time the system boots.
Changing the Mode of SELinux Using the GUI
Use the following procedure to change the mode of SELinux using the GUI.
Note
You need administrator privileges to perform this procedure.
- On themenu, point to and then click to display the Security Level Configuration dialog box.
- Click the SELinux tab.
- In the SELinux Setting select either
Disabled
,Enforcing
orPermissive
, and then click . - If you changed from
Enabled
toDisabled
or vice versa, you need to restart the machine for the change to take effect.
Changes made using this dialog box are immediately reflected in
/etc/sysconfig/selinux
.