Setting Selinux - NEC Express Server Express5800 Series Installation Manual

Chapter 1 Installing Operating System
3.5

Setting SELinux

SELinux is set to "Disabled" by default. Change the SELinux setting as required according to the following
procedure.
1. Log in to the server as the root user. If you login with graphical mode, select [Others...] to login.
2. Execute the following command to check the SELinux current setting.
If the current setting is "Disabled", the following message appears.
# getenforce
Disabled
If the current setting is "Enforcing", the following message appears.
# getenforce
Enforcing
If the current setting is "Permissive", the following message appears.
# getenforce
Permissive
3. Open "/etc/sysconfig/selinux" with the editor, and search for the following line.
SELINUX=<current_setting>
4. Edit the above line and save the file.
Change the line as shown below for "Disabled".
SELINUX=disabled
Change the line as shown below for "Enforcing".
SELINUX=enforcing
Change the line as shown below for "Permissive".
SELINUX=permissive
5. Execute the following command to restart this system.
# systemctl reboot
If the SELinux setting is not "Disabled", set the appropriate security context by the SELinux
Tips
policy setting file. Otherwise, the security violation warning may be issued or an error may
occur while the software is used, and the system may not operate normally. Fully
understand the SELinux security context before changing the setting.
Express5800/R320e-E4, R320e-M4 Installation Guide (Linux)
3. Procedure for Changing the System Environment Setting
55