Backing Up And Restoring The System; Enabling Or Disabling Enforcement - Red Hat ENTERPRISE LINUX 5 - DEPLOYMENT Deployment Manual

on the device node. For example, if your /var/ directory is located on an LVM (Logical Volume
1
Management
) device, /dev/dm-0, the device node is identified in the message as dev=dm-0. When
you see path=/ in this example, that is the top level of the LVM device dm-0, not necessarily the
same as the root file system designation /.

45.2.5. Backing Up and Restoring the System

Refer to the explanation in

45.2.6. Enabling or Disabling Enforcement

You can enable and disable SELinux enforcement at runtime or configure it to start in the correct
mode at boot time, using the command line or GUI. SELinux can operate in one of three modes:
disabled, meaning not enabled in the kernel; permissive, meaning SELinux is running and logging but
not controlling permissions; or enforcing, meaning SELinux is running and enforcing policy.
Use the setenforce command to change between permissive and enforcing modes at runtime. Use
setenforce 0 to enter permissive mode; use setenforce 1 to enter enforcing mode.
The sestatus command displays the current mode and the mode from the configuration file
referenced during boot:
sestatus | grep -i mode
Current mode:
Mode from config file:
Note that changing the runtime enforcement does not affect the boot time configuration:
setenforce 1
sestatus | grep -i mode
Current mode:
Mode from config file:
You can also disable enforcing mode for a single daemon. For example, if you are trying to
troubleshoot the named daemon and SELinux, you can turn off enforcing for just that daemon.
Use the getsebool command to get the current status of the boolean:
[root@host2a ~]# getsebool named_disable_trans
named_disable_trans --> off
Use the following command to disable enforcing mode for this daemon:
[root@host2a ~]# setsebool named_disable_trans 1
[root@host2a ~]# getsebool named_disable_trans
named_disable_trans --> on
LVM is the grouping of physical storage into virtual pools that are partitioned into logical volumes.
Section 45.1.4, "Creating Archives That Retain Security
permissive
permissive
enforcing
permissive
Backing Up and Restoring the System
Contexts".
761