search
  • Sign In
  • Sign Up
Password reset successful

Follow the proiects vou are interested in andi aet the latestnews about them taster

Table of Contents
Check Current SELinux Status
Disable SELinux Temporarily (Until Reboot)
Disable SELinux Permanently
Verify After Reboot
Home Operation and Maintenance Linux Operation and Maintenance How to disable SELinux temporarily or permanently in Linux

How to disable SELinux temporarily or permanently in Linux

Nov 09, 2025 am 01:26 AM
linux selinux

Check SELinux status with sestatus to confirm current mode. 2. Temporarily disable enforcement using setenforce 0, which takes effect immediately but does not persist after reboot. 3. For permanent disable, edit /etc/selinux/config, set SELINUX=disabled, then reboot. 4. Verify final status post-reboot with sestatus to ensure it shows "disabled".

How to disable SELinux temporarily or permanently in Linux

Sometimes SELinux can interfere with application behavior or service configuration, especially during development or testing. You might need to disable it temporarily or permanently depending on your use case. Here's how to do both safely and correctly.

Check Current SELinux Status

Before making changes, verify SELinux is enabled and see its current mode:

sestatus

This command shows whether SELinux is in enforcing, permissive, or disabled mode. Enforcing means active protection; permissive logs violations but doesn’t block actions.

Disable SELinux Temporarily (Until Reboot)

To turn off enforcement without rebooting:

setenforce 0

This switches SELinux to permissive mode immediately. It’s useful for troubleshooting. To re-enable it later:

setenforce 1

Note: This change doesn’t survive a reboot. Use it when you're testing services or debugging permission issues.

Disable SELinux Permanently

To disable SELinux across reboots, edit the configuration file:

sudo vi /etc/selinux/config

Find the line:

SELINUX=enforcing

Change it to:

SELINUX=disabled

Save and exit. The change takes effect after reboot. Alternatively, some systems use /etc/sysconfig/selinux, which is typically a symlink to the same config file.

Verify After Reboot

After restarting, confirm SELinux is fully disabled:

sestatus

You should see:

SELinux status: disabled

If it still shows "enabled", double-check the config file spelling and ensure no typos like disable instead of disabled.

Disabling SELinux reduces system security, so only do it if absolutely necessary and understand the risks. In production environments, consider using permissive mode or adjusting policies instead.

Basically, just toggle with setenforce for temporary relief, or edit /etc/selinux/config to turn it off permanently.

The above is the detailed content of How to disable SELinux temporarily or permanently in Linux. For more information, please follow other related articles on the PHP Chinese website!

Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Hot AI Tools

Undress AI Tool

Undress AI Tool

Undress images for free

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

ArtGPT

ArtGPT

AI image generator for creative art from text prompts.

Stock Market GPT

Stock Market GPT

AI powered investment research for smarter decisions

Popular tool

Notepad++7.3.1

Notepad++7.3.1

Easy-to-use and free code editor

SublimeText3 Chinese version

SublimeText3 Chinese version

Chinese version, very easy to use

Zend Studio 13.0.1

Zend Studio 13.0.1

Powerful PHP integrated development environment

Dreamweaver CS6

Dreamweaver CS6

Visual web development tools

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)

How to install Redis cluster on Linux_Linux distributed cache deployment solution [Advanced] How to install Redis cluster on Linux_Linux distributed cache deployment solution [Advanced] Feb 08, 2026 pm 07:39 PM

The Redis6 cluster must be created with redis-cli--cluster. It requires a minimum of 3 masters and 3 slaves, a total of 6 nodes. The client port and the corresponding cluster bus port (10000) must be opened. Correct configuration but blocked ports is a common cause of failure.

How to import SQL files in mysql_mysql SQL file import method How to import SQL files in mysql_mysql SQL file import method Feb 09, 2026 pm 05:24 PM

The most common and reliable way to import SQL files into MySQL is the command line tool mysql, which supports cross-platform, high efficiency and stability, and is suitable for files of all sizes. It can also be executed in the client through the source command, or using graphical tools such as phpMyAdmin and MySQL Workbench.

How to check system vulnerabilities in Linux_Linux installation and use of security scanning tools [Plan] How to check system vulnerabilities in Linux_Linux installation and use of security scanning tools [Plan] Feb 08, 2026 pm 08:22 PM

Linux systems need to use third-party tools for security scanning; lynis is suitable for lightweight local auditing, openvas must be deployed with Docker, nmap and nessus cannot be automatically connected, and the effectiveness of scanning depends on credentials, settings and feed updates.

How to check the kernel version in Linux_Linux query system kernel uname command [Basic] How to check the kernel version in Linux_Linux query system kernel uname command [Basic] Feb 08, 2026 pm 07:48 PM

uname-r is the most accurate and quick way to obtain the current kernel version number. It only outputs the release field such as 6.1.0-22-amd64, without redundant information, which is convenient for script parsing; other commands such as uname-v, uname-a or /proc/version have their own uses but are not specifically used for version extraction.

How to check the MAC address of the network card in Linux_Linux obtains the physical network card information [Notes] How to check the MAC address of the network card in Linux_Linux obtains the physical network card information [Notes] Feb 08, 2026 pm 08:25 PM

The most reliable way is to use the iplinkshow command, because it is compatible with old and new kernels, has clear output, and does not confuse virtual interfaces; the MAC address is located after the link/ether line and can be accurately extracted with grep.

How to diagnose mysql query performance bottleneck_mysql performance analysis method How to diagnose mysql query performance bottleneck_mysql performance analysis method Feb 08, 2026 am 09:45 AM

Slow query optimization requires four layers of troubleshooting: "Log → Execution Plan → System Indicators → Configure Hardware": first open slow_query_log to capture queries that exceed 1 second; then use EXPLAIN to analyze type, key, rows and Extra; then check sar, buffer pool hit rate, lock wait and number of connections; finally examine innodb_flush_method, redolog size, large field storage and network architecture.

How to install the GCC compiler on Linux_Essential environment for Linux source code compilation [Tutorial] How to install the GCC compiler on Linux_Essential environment for Linux source code compilation [Tutorial] Feb 08, 2026 pm 08:28 PM

Using sudoaptinstallbuild-essential is the fastest under Ubuntu/Debian. It automatically installs gcc, g, make, libc6-dev, etc.; only installing gcc will report an error that stdio.h does not exist due to a missing header file.

Ultimate solution to ZAP installation failure: Why you must install JDK and not just JRE Ultimate solution to ZAP installation failure: Why you must install JDK and not just JRE Feb 08, 2026 am 11:15 AM

When ZAP (ZedAttackProxy) is installed, it prompts "Java 64-bit file not found." The root cause is not that Java is not installed, but that the JRE that only contains the running environment is mistakenly installed; ZAP actually relies on JDK11 (such as JDK21) because it requires the use of development components such as compilers and debugging tools.

Related articles