Linux系统关闭SElinux设置

[root@rockylinux ~]# getenforceEnforcing[root@rockylinux ~]# setenforce 0[root@rockylinux ~]# getenforcePermissive

# This file controls the state of SELinux on the system.# SELINUX= can take one of these three values:#     enforcing - SELinux security policy is enforced.#     permissive - SELinux prints warnings instead of enforcing.#     disabled - No SELinux policy is loaded.# See also:# https://docs.fedoraproject.org/en-US/quick-docs/getting-started-with-selinux/#getting-started-with-selinux-selinux-states-and-modes## NOTE: In earlier Fedora kernel builds, SELINUX=disabled would also# fully disable SELinux during boot. If you need a system with SELinux# fully disabled instead of SELinux running with no policy loaded, you# need to pass selinux=0 to the kernel command line. You can use grubby# to persistently set the bootloader to boot with selinux=0:##    grubby --update-kernel ALL --args selinux=0## To revert back to SELinux enabled:##    grubby --update-kernel ALL --remove-args selinux#SELINUX=enforcing# SELINUXTYPE= can take one of these three values:#     targeted - Targeted processes are protected,#     minimum - Modification of targeted policy. Only selected processes are protected.#     mls - Multi Level Security protection.SELINUXTYPE=targeted

[root@rockylinux ~]# sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config[root@rockylinux ~]# grep 'SELINUX=disabled' /etc/selinux/config # NOTE: In earlier Fedora kernel builds, SELINUX=disabled would alsoSELINUX=disabled