selinux-config-enforcing(8)

💖 selinux-config-enforcing — the little 8th-section glow-up 💖

okay bestie, welcome to selinux-config-enforcing(8), a page from the System Manager's Manual. yes it's a whole manual page for one (1) tiny command and honestly? iconic behaviour.

🌸 NAME 🌸

selinux-config-enforcing — edits /etc/selinux/config so your system boots into enforcing or permissive mode, no cap.

✨ SYNOPSIS ✨

selinux-config-enforcing [permissive]

💅 DESCRIPTION 💅

so like, this command goes straight into /etc/selinux/config and rewrites it to say whether SE Linux should be running in enforcing mode or permissive mode when you boot up. that's it. that's the whole job. it's giving low-effort, high-impact.

🫶 but heads up bestie: the enforcing= kernel command-line option can override all of this. it takes the value 0 for permissive and 1 for enforcing. so if your kernel line is out here contradicting your config file, the kernel wins. periodt.

and the parameter logic? honestly so simple:

• the parameter 0 or permissive → it sets permissive mode.
• any other parameter → it sets enforcing mode.

that's it. literally any other thing you type gets you enforcing. the vibes are: permissive requires commitment, everything else is enforcing by default. 💀

👑 SEE ALSO 👑

your reading list, bestie, go be a scholar:

• selinux(8)
• sestatus(8)
• selinuxenabled(1)
• load_policy(8)
• semodule(8)
• postfix-nochroot(8)
• check-selinux-installation(8)
• selinux-policy-upgrade(8)
• http://wiki.debian.org/SELinux — More about SELinux Debian install
• http://etbe.coker.com.au/tag/selinux/ — Russell's SE Linux blog posts.

🎀 AUTHOR 🎀

This program and it's man page was written by Russell Coker <russell@coker.com.au> for the Debian system (but may be used by others). Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 3. ✨

On Debian systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL-3.

and that's the whole page, bestie!! 🦋 slay, go flip your SELinux mode responsibly, and remember: this was selinux-config-enforcing(8) from the System Manager's Manual, no version number listed, no date on the footer either — just the page name, twice, holding it down. mwah. 💖🌸💅