hank-test/quick-docs
1
0
Fork 0
mirror of https://pagure.io/fedora-docs/quick-docs.git synced 2024-11-28 14:56:35 +00:00
Code Issues 1 Projects Releases Packages Wiki Activity Actions

Update modules/ROOT/pages/_partials/proc_changing-to-permissive-mode.adoc

Browse source
This commit is contained in:
Mat McCabe 2022-02-11 02:07:26 +00:00 committed by copperi
parent 8b0b9e4c6e
commit 4d2826a496
1 changed files with 13 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
modules/ROOT/pages/_partials/proc_changing-to-permissive-mode.adoc
View file

@ -5,14 +5,22 @@
[#{context}-changing-to-permissive-mode]
= Changing to permissive mode
When SELinux is running in permissive mode, SELinux policy is not enforced. The system remains operational and SELinux does not deny any operations but only logs AVC messages, which can be then used for troubleshooting, debugging, and SELinux policy improvements. Each AVC is logged only once in this case.
Use the following procedure to permanently change SELinux mode to permissive. When SELinux is running in permissive mode, SELinux policy is not enforced. The system remains operational and SELinux does not deny any operations but only logs AVC messages, which can be then used for troubleshooting, debugging, and SELinux policy improvements. Each AVC is logged only once in this case.
.Prerequisites
* The `selinux-policy-targeted`, `libselinux-utils`, and `policycoreutils` packages are installed on your system.
* The `selinux=0` or `enforcing=0` kernel parameters are not used.
.Procedure
To permanently change mode to permissive:
. Open the `/etc/selinux/config` file in a text editor of your choice, for example:
. Edit the `/etc/selinux/config` file as follows:
+
----
# vi /etc/selinux/config
----
. Configure the `SELINUX=permissive` option:
[subs="quotes"]
----
# This file controls the state of SELinux on the system.
@ -31,5 +39,5 @@ SELINUXTYPE=targeted
+
[subs="quotes"]
----
$ *reboot*
# *reboot*
----