Setting default modes of SELinux

The configuration file of SELinux is /etc/selinux/config. It determines the mode and policy of SELinux at boot time. We can modify the /etc/selinux/config file and set the SELINUX=permissive parameter to change the default mode of SELinux, as shown in the following diagram:

In previous releases of CentOS, the SELinux configuration file was stored at /etc/sysconfig/selinux. Now, in CentOS 7, this file is a symlink of /etc/selinux/confg.

If any kernel argument of enforcing=0 for permissive mode or selinux=0 for disabling SELinux is passed at boot, then it will override the current configuration set in /etc/selinux/config ...

Get CentOS Quick Start Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.