Linux – SElinux: How to change to permissive mode without a reboot

linuxselinux

I need to change selinux to "permissive mode" on a production server without a reboot, but setenforce wont let me do it(as a root), it always prints "setenforce: SELinux is disabled"
What i'm doing wrong?

[root@server3 ~]# setenforce 0
setenforce: SELinux is disabled
[root@server3 ~]# setenforce 1
setenforce: SELinux is disabled
[root@server3 ~]# setenforce Permissive
setenforce: SELinux is disabled
[root@server3 ~]# getenforce
Disabled

Best Answer

setenforce can only be used to change the mode SELinux is running in. It cannot be used to enable SELinux.

Related Solutions

Postfix won’t run while selinux in enforcing mode

If you ever need ipv6 enabled, the way to solve this would be to build and install a custom SELinux policy, based on these errors:

# grep postfix_master /var/log/audit/audit.log | audit2allow -m postfixCustom > postfix.te
# checkmodule -M -m -o postfix.mod postfix.te
# semodule_package -m postfix.mod -o postfix.pp 
# semodule -i postfix.pp

Selinux in permissive mode, ssh key based auth and locked account

So, I found the problem. It seems to be indeed a configuration problem.

If the sshd_config contains the directive UsePAM no then the ssh daemon doesn't accept the user key and ask for a password.

With UsePAM yes the login via keys is working in all cases (SELINUX permissive or enforced, user account locked or not)

Best Answer

Related Solutions

Postfix won’t run while selinux in enforcing mode

Selinux in permissive mode, ssh key based auth and locked account

Related Topic