RHEL7: How to put a process domain into permissive mode.

Share this link

When using SELinux, you sometimes need to put the whole system into permissive mode in order to debug a single process. It is now possible to put one and only one process domain into permissive mode.

To put a process domain (here httpd_t) into permissive mode, type:

# semanage permissive -a httpd_t

To list the domains in permissive mode, type:

# semanage permissive -l

To restore the process domain (here httpd_t) into enforcing mode, type:

# semanage permissive -d httpd_t

To disable all permissive domains, type:

# semodule -d permissivedomains

Source: RHEL 7 SELinux Administration Guide.

1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading...

Leave a Reply

RHCSA7: Task of the day

Allowed time: 5 minutes.
Create a user called tom. Create a directory named /private. Use an acl to only allow access (rwx) to tom to the private directory.

RHCE7: Task of the day

Allowed time: 5 minutes.
Set up time synchronization with default configuration.

Follow me on Twitter

Poll for favorite RHEL 7 book

What is your favorite RHEL 7 book to prepare RHCSA & RHCE exams?

View Results

Loading ... Loading ...

Poll for most difficult RHCSA 7 topic

What do you think is the most difficult RHCSA 7 topic?

View Results

Loading ... Loading ...

Poll for most difficult RHCE 7 topic

What do you think is the most difficult RHCE 7 topic?

View Results

Loading ... Loading ...

Archives