This file controls the state of SELinux on the system.
SELINUX=disabled
enforcing - SELinux security policy is enforced.
permissive - SELinux prints warnings instead of enforcing.
disabled - SELinux is fully disabled.
SELINUX=disabled
SELINUXTYPE= type of policy in use. Possible values are:
targeted - Only targeted network daemons are protected.
strict - Full SELinux protection.
SELINUXTYPE=targeted
SETLOCALDEFS= Check local definition changes
SETLOCALDEFS=0
Doesn’t this make my server easier to attack ?
You install and look after a lot of servers, do most of them have
SELinux enabled or disabled?
If I enable SELinux is it likely to mess things up ?