Up until now we have disabled SELinux as our Standard Operating Procedure — before you tell me off, I know. That's why we're enabling it now we've got time to.
Our normal procedure was to:
- Set
SELINUX=disabled
in/etc/selinux/config
- Add
selinux=0
to thekernel
line of grub
I'm trying to undo all this now, but on some servers it just won't reenable for some reason.
~ # grep ^SELINUX= /etc/selinux/config
SELINUX=permissive
~ # grep -i selinux /boot/grub/menu.lst
~ # getenforce
Disabled
~ # sestatus
SELinux status: disabled
~ # setenforce 1
setenforce: SELinux is disabled
~ # sestatus
SELinux status: disabled
I've rebooted (multiple times) to no avail, including an initial reboot with a /.autorelabel
file.
Can anyone tell me what I'm missing?
CentOS 6 2.6.32-431.20.3.el6.x86_64
Best Answer
Running
dmesg | grep -i selinux
turned up this little error:What file provides that?
Reinstalling seems to make it good:
Apologies for the noise; hopefully this might help someone else in the future though at least.