How to enable SELinux?

To enable SELinux on a Linux system, you typically need to modify the SELinux configuration file and then reboot the system. Here are the steps to enable SELinux:

Steps to Enable SELinux

1. Open the SELinux Configuration File: You can use a text editor to open the SELinux configuration file located at /etc/selinux/config.

   sudo nano /etc/selinux/config
   

2. Modify the Configuration: Find the line that starts with SELINUX= and change its value to enforcing or permissive.

   • To enable SELinux in enforcing mode:

     SELINUX=enforcing
     

   • To enable SELinux in permissive mode (for testing):

     SELINUX=permissive
     

3. Save and Exit: After making the changes, save the file and exit the text editor.

4. Reboot the System: For the changes to take effect, you need to reboot your system.

   sudo reboot
   

5. Verify SELinux Status: After the system reboots, you can check the status of SELinux using the following command:

   sestatus
   

   This command will display the current status of SELinux, including whether it is enabled and in which mode it is operating.

Note

• If SELinux was previously disabled, you may need to ensure that the necessary SELinux policies and contexts are set up correctly for your applications after enabling it.
• If you encounter issues after enabling SELinux, you can temporarily set it to permissive mode to troubleshoot without enforcing the policies.