Files Related To Selinux - Red Hat ENTERPRISE LINUX 5 - DEPLOYMENT Deployment Manual

Figure 44.1. SELinux Decision Process
SELinux Operating Modes
Instead of running in enforcing mode, SELinux can run in permissive mode, where the AVC is
checked and denials are logged, but SELinux does not enforce the policy. This can be useful for
troubleshooting and for developing or fine-tuning SELinux policy.
For more information about how SELinux works, refer to

44.2.2. Files Related to SELinux

The following sections describe SELinux configuration files and related file systems.
44.2.2.1. The SELinux Pseudo-File System
The /selinux/ pseudo-file system contains commands that are most commonly used by the kernel
subsystem. This type of file system is similar to the /proc/ pseudo-file system.
Administrators and users do not normally need to manipulate this component.
The following example shows sample contents of the /selinux/ directory:
-rw-rw-rw- 1 root root 0 Sep 22 13:14 access
dr-xr-xr-x 1 root root 0 Sep 22 13:14 booleans
--w------- 1 root root 0 Sep 22 13:14 commit_pending_bools
-rw-rw-rw- 1 root root 0 Sep 22 13:14 context
-rw-rw-rw- 1 root root 0 Sep 22 13:14 create
--w------- 1 root root 0 Sep 22 13:14 disable
-rw-r--r-- 1 root root 0 Sep 22 13:14 enforce
-rw------- 1 root root 0 Sep 22 13:14 load
-r--r--r-- 1 root root 0 Sep 22 13:14 mls
-r--r--r-- 1 root root 0 Sep 22 13:14 policyvers
-rw-rw-rw- 1 root root 0 Sep 22 13:14 relabel
-rw-rw-rw- 1 root root 0 Sep 22 13:14 user
Files Related to SELinux
Section 44.2.3, "Additional Resources".
727