In this tutorial we will show you how to disable SELinux on CentOS 8. For those of you who didn’t know, Security-Enhanced Linux (SELinux) is a Linux feature that provides the mechanism for supporting access control security policies. By default, when you installed the linux operation system, The SELinux service is enabled, As some softwares do not support SELinux that the state is enable, So you need to disable or turn off the SELinux config.
Following are the modes in SELinux:
- Enforcing Mode: Here in this mode, SELinux is enabled and access allowed following SELinux Rules.
- Permissive Mode: In this mode, SELinux allows applications whatever they want to do. If they are doing things that are not allowed in SELinux Rules then it will keep logs for that.
- Disabled: SELinux is disabled in this mode.
This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo’ to the commands to get root privileges. I will show you through the step by step disable SELinux on a CentOS 8 server.
Disable SELinux on CentOS 8
Step 1. First let’s start by ensuring your system is up-to-date.
1 | sudodnfupdate |
Step 2. Checking the SELinux Status.
First, we need to see how SELinux is configured, issue the sestatus command.
1 | $sestatus |
1 2 3 4 5 6 7 8 9 | SELinuxstatus: enabled SELinuxfsmount: /sys/fs/selinux SELinuxrootdirectory: /etc/selinux Loadedpolicyname: targeted Currentmode: enforcing Modefromconfigfile: enforcing PolicyMLSstatus: enabled Policydeny_unknownstatus: allowed Maxkernelpolicyversion: 28 |
To temporarily disable SELinux or set SELinux status from targeted to permissive, run the command:
1 | sudosetenforce0 |
Additionally, you can use the Permissive option instead of 0 as shown:
1 | sudosetenforcePermissive |
To permanently disable SELinux. edit its main configuration file /etc/selinux/config and set:
1 | nano/etc/selinux/config |
Change “SELINUX=enforcing” to “SELINUX=disabled” and save the configuration file:
1 2 3 4 5 6 7 8 9 10 | # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - No SELinux policy is loaded. SELINUX=disabled # SELINUXTYPE= can take one of these two values: # targeted - Targeted processes are protected, # mls - Multi Level Security protection. SELINUXTYPE=targeted |
Reboot your system after the change:
1 | reboot |
After reboot, you can verify the status of SELinux. Issue “sestatus” command to verify that SELinux permanently disabled:
1 2 | $sestatus SELinuxstatus: disabled |
Congratulation’s! You have successfully disable SELinux. Thanks for using this tutorial for disable Security-Enhanced Linux on your CentOS 8 system.
