How to enable SELinux?

To enable SELinux on a Linux system, you typically need to modify the SELinux configuration file and then reboot the system. Here are the steps to enable SELinux:

Steps to Enable SELinux

1. Open the SELinux Configuration File:
   You can use a text editor to open the SELinux configuration file located at /etc/selinux/config.

   sudo nano /etc/selinux/config

2. Modify the Configuration:
   Find the line that starts with SELINUX= and change its value to enforcing or permissive.

   • To enable SELinux in enforcing mode:

     SELINUX=enforcing

   • To enable SELinux in permissive mode (for testing):

     SELINUX=permissive

3. Save and Exit:
   After making the changes, save the file and exit the text editor.

4. Reboot the System:
   For the changes to take effect, you need to reboot your system.

   sudo reboot

5. Verify SELinux Status:
   After the system reboots, you can check the status of SELinux using the following command:

   sestatus

   This command will display the current status of SELinux, including whether it is enabled and in which mode it is operating.

Note

• If SELinux was previously disabled, you may need to ensure that the necessary SELinux policies and contexts are set up correctly for your applications after enabling it.
• If you encounter issues after enabling SELinux, you can temporarily set it to permissive mode to troubleshoot without enforcing the policies.