50.2.12. Useful Commands for Scripts

This command returns the enforcing status of SELinux.

This command controls the enforcing mode of SELinux. The option 1 or Enforcing tells SELinux to enter enforcing mode. The option 0 or Permissive tells SELinux to enter passive mode. Access violations are still logged, but not prevented.

This command exits with a status of 0 if SELinux is enabled, and 1 if SELinux is disabled.

selinuxenabled
echo $?

~]# selinuxenabled
~]# echo $?
0

This command shows the status of all booleans (-a) or a specific boolean (<boolean_name>).

This command sets one or more boolean values. The -P option makes the changes persistent across reboots.

This command toggles the setting of one or more booleans. This effects boolean settings in memory only; changes are not persistent across reboots.