security_disable(3)

✨ NAME ✨

security_disable — bestie, this one turns off the SELinux kernel code at runtime 👑

🎀 SYNOPSIS 🎀

#include <selinux/selinux.h>

int security_disable(void);

💖 DESCRIPTION 💖

okay so here's the tea 🍓 — security_disable() does three things in one glorious swoop:

• it disables the SELinux kernel code
• it unregisters selinuxfs from /proc/filesystems
• and then it unmounts /sys/fs/selinux

like, it's giving full shutdown energy fr fr 💅

⚠️ now listen, this is the important part. This function is only supported on Linux 6.3 and earlier, and it can only be called at runtime and prior to the initial policy load. Periodt.

After the initial policy load? Nope. The SELinux kernel code cannot be disabled at that point — it can only be placed in "permissive" mode by using security_setenforce(3). That's the only move left, bestie 😭

🌸 RETURN VALUE 🌸

security_disable() returns zero on success or -1 on error. Simple as that 🫶

🦋 AUTHOR 🦋

This manual page has been written by Guido Trentalancia <guido@trentalancia.com> — ty for your service king 👑

⭐ SEE ALSO ⭐

• selinux(8)
• setenforce (8)

and that's the whole vibe check, bestie 💜 this lil page is part of the SELinux API documentation, and it's dated 21 Nov 2009 — yes she's an icon, yes she's been iconic for a minute, no cap. mwah, go be safe out there 🌈✨