第三章、SELinux 初探

When SELinux is running in permissive mode, SELinux policy is not enforced. The system remains operational and SELinux does not deny any operations but only ...

2020年8月16日 — 编辑配置文件/etc/selinux/config，把SELINUX= 更改为SELINUX=disabled ，然后重启系统，SELinux 就被禁用了。

Enforcing mode is the default. Permissive mode allows operations that are not permitted in enforcing mode and logs those operations to the SELinux audit log.

The getenforce command returns Enforcing , Permissive , or Disabled . The sestatus command returns the SELinux status and the SELinux policy being used: [~]$ ...

2017年6月19日 — SELinux 共有三種模式如下：. Enforcing ：強制模式，依據設定來限制檔案資源存取。 Permissive ：寬容模式，不限制檔案資源 ...

SELinux 模式(Mode)： SELinux 根據開啟與否，共有三種模式，分別是關閉(Disabled)、寬容模式(Permissive) 與強制模式(Enforcing)。

SELinux can operate in two global modes: Permissive mode, in which permission denials are logged but not enforced. Enforcing mode, in which permissions denials ...

2022年6月23日 — Marking one type as permissive. The previous sections all used full switching - either the system is running in enforcing, or the system is ...

Permissive - The system acts as if SELinux is enforcing the loaded security policy, including labeling objects and emitting access denial entries in the logs, ...