RHEL7: How to put a process domain into permissive mode.

Share this link

When using SELinux, you sometimes need to put the whole system into permissive mode in order to debug a single process. It is now possible to put one and only one process domain into permissive mode.

To put a process domain (here httpd_t) into permissive mode, type:

# semanage permissive -a httpd_t

To list the domains in permissive mode, type:

# semanage permissive -l

To restore the process domain (here httpd_t) into enforcing mode, type:

# semanage permissive -d httpd_t

To disable all permissive domains, type:

# semodule -d permissivedomains

Source: RHEL 7 SELinux Administration Guide.

1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading...

Leave a Reply

Please Login to comment
  Subscribe  
Notify of

Upcoming Events (Local Time)

  1. Feb
    1
    Fri

    1. 8:30 am - View Details
      CentOS: Dojo, Brussels, Belgium.

RHCSA7: Task of the day

Allowed time: 10 minutes.
Create an EXT4 file system mounted by UUID in /etc/fstab under /vol based on a logical volume of 28 logical extents.

RHCE7: Task of the day

Allowed time: 3 minutes.
Configure your machine to be a router.

Follow me on Twitter

Poll for favorite RHEL 7 book

What is your favorite RHEL 7 book to prepare RHCSA & RHCE exams?

View Results

Loading ... Loading ...

Poll for most difficult RHCSA 7 topic

What do you think is the most difficult RHCSA 7 topic?

View Results

Loading ... Loading ...

Poll for most difficult RHCE 7 topic

What do you think is the most difficult RHCE 7 topic?

View Results

Loading ... Loading ...