RHEL7: How to put a process domain into permissive mode.

Share this link

When using SELinux, you sometimes need to put the whole system into permissive mode in order to debug a single process. It is now possible to put one and only one process domain into permissive mode.

To put a process domain (here httpd_t) into permissive mode, type:

# semanage permissive -a httpd_t

To list the domains in permissive mode, type:

# semanage permissive -l

To restore the process domain (here httpd_t) into enforcing mode, type:

# semanage permissive -d httpd_t

To disable all permissive domains, type:

# semodule -d permissivedomains

Source: RHEL 7 SELinux Administration Guide.

1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading...

Leave a Reply

Upcoming Events (Local Time)

There are no events.

RHCSA7: Task of the day

Allowed time: 10 minutes.
Create an EXT4 file system mounted under /vol based on a logical volume of 100MB.
Reduce the size to 60MB.

RHCE7: Task of the day

Allowed time: 10 minutes.
Set up a default secure MariaDB database called maria and back up the database with mysqldump.

Follow me on Twitter

Poll for favorite RHEL 7 book

What is your favorite RHEL 7 book to prepare RHCSA & RHCE exams?

View Results

Loading ... Loading ...

Poll for most difficult RHCSA 7 topic

What do you think is the most difficult RHCSA 7 topic?

View Results

Loading ... Loading ...

Poll for most difficult RHCE 7 topic

What do you think is the most difficult RHCE 7 topic?

View Results

Loading ... Loading ...