Here’s how you would disable SELinux permanently.
1. vi the “/etc/selinux/config” file.
2. Change the following line;
SELINUX=enforcing to SELINUX=disabled
3. Save the file and reboot.
4. To verify if SELinux is disabled, run “dmesg | grep selinux“. You should see selinux=0
selinux_register_security:Â Registering secondary module capability
audit(1229470429.628:2): selinux=0 auid=4294967295 ses=4294967295
My /etc/selinux/config file.
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#Â Â Â Â Â Â enforcing - SELinux security policy is enforced.
#Â Â Â Â Â Â permissive - SELinux prints warnings instead of enforcing.
#Â Â Â Â Â Â disabled - SELinux is fully disabled.
#SELINUX=enforcing
SELINUX=disabled
# SELINUXTYPE= type of policy in use. Possible values are:
#Â Â Â Â Â Â targeted - Only targeted network daemons are protected.
#Â Â Â Â Â Â strict - Full SELinux protection.
SELINUXTYPE=targeted
Author comments are in a darker gray color for you to easily identify the posts author in the comments
Actually you can use the text GUI setup
setup > Firewall Configuration > SeLinux > Disabled
the same effect and still available with any text based centos.
thanks dude
The console command to run the GUI that Amran mentions is “system-config-securitylevel-tui”.
Be warned though that if you run this and have custom IPTables rules it will rewrite them… LOL. Found that out the hard way!