When using SELinux, you sometimes need to put the whole system into permissive mode in order to debug a single process. It is now possible to put one and only one process domain into permissive mode.
To put a process domain (here httpd_t) into permissive mode, type:
# semanage permissive -a httpd_t
To list the domains in permissive mode, type:
# semanage permissive -l
To restore the process domain (here httpd_t) into enforcing mode, type:
# semanage permissive -d httpd_t
To disable all permissive domains, type:
# semodule -d permissivedomains
Source: RHEL 7 SELinux Administration Guide.
Leave a Reply
You must be logged in to post a comment.