Kernel Parameters
  • Dark
  • PDF

Kernel Parameters

  • Dark
  • PDF

To set kernel parameters:

  • SE Linux is recommended whenever feasible.
  • Do not configure SE Linux in disabled mode.
  • Permissive mode will allow all required system calls to be made while the system provides auditing of the system calls.
  • The status of SE Linux can be displayed with the sestatus command.

Display Status

$ sestatus
SELinux status:              enabled
SELinuxfs mount:             /sys/fs/selinux
SELinux root directory:      /etc/selinux
Loaded policy name:          targeted
Current mode:                permissive
Mode from config file:       permissive
Policy MLS status:           enabled
Policy deny_unknown status:  allowed
Max kernel policy version:   28

Permissive mode can be configured with the following command.


setenforce permissive