Help Center/ Huawei Cloud EulerOS/ FAQs/ How Do I Enable SELinux on an ECS Running HCE?
Updated on 2024-09-20 GMT+08:00
View PDF
Share

How Do I Enable SELinux on an ECS Running HCE?

By default, SELinux is disabled on HCE. You can enable SELinux as needed.

Do not run the /etc/selinux/config command to enable SELinux. If you enable SELinux by running this command, login may fail.

Procedure

  1. Open the configuration file /boot/grub2/grub.cfg and delete selinux=0.
  2. Run the touch /.autorelabel command.

    The /.autorelabel file triggers the OS to relabel all files on the disk during startup. This process may take several minutes. After the relabel operation is complete, the OS automatically restarts for the operation to take effect and deletes the /.autorelabel file to ensure that the relabel operation will not be performed again.

  3. Open the configuration file /etc/selinux/config, set SELINUX to permissive, and run the reboot command to restart the OS.

  4. Open the configuration file /etc/selinux/config, set SELINUX to enforcing, and run the reboot command to restart the OS.

  5. Run the getenforce command to check the SELinux status.

    If Enforcing is displayed, SELinux is enabled.