Linux commands and uses for SELinux

1. Settings for the mode:

Modify the value of selinux= "" in the/etc/selinux/config file, and then restart.
Enforcing: Mandatory mode, cannot be executed as long as SELinux is not allowed
Permissive: Warning mode, which logs the event and still allows execution
Disabled: Turn off SELinux, deactivate, enable the need to restart the computer.

Temporary settings:

Permissive mode: Setenforce 0

Enforcing mode: Setenforce 1

2. Settings for the policy:

The Getsebool command obtains a native SELinux policy value, also known as a bool value:
Getsebool-a

Setsebool command to set the native SELinux policy value

Setsebool-p xxx=1 or Setsebool-p xxx=0
-P is a permanent setting, or the default value is restored after reboot.

Linux commands and uses for SELinux