RHEL7: How to put a process domain into permissive mode.

When using SELinux, you sometimes need to put the whole system into permissive mode in order to debug a single process. It is now possible to put one and only one process domain into permissive mode.

To put a process domain (here httpd_t) into permissive mode, type:

# semanage permissive -a httpd_t

To list the domains in permissive mode, type:

# semanage permissive -l

To restore the process domain (here httpd_t) into enforcing mode, type:

# semanage permissive -d httpd_t

To disable all permissive domains, type:

# semodule -d permissivedomains

Source: RHEL 7 SELinux Administration Guide.