{"id":11145,"date":"2021-09-20T11:44:06","date_gmt":"2021-09-20T08:44:06","guid":{"rendered":"https:\/\/unihost.com\/help\/?p=11145"},"modified":"2026-08-17T12:38:23","modified_gmt":"2026-08-17T09:38:23","slug":"how-to-disable-selinux-on-centos-rhel-fedora","status":"publish","type":"post","link":"https:\/\/unihost.com\/help\/how-to-disable-selinux-on-centos-rhel-fedora\/","title":{"rendered":"How to disable SELinux on CentOS \/ RHEL \/ Fedora"},"content":{"rendered":"

SELinux (Security-Enhanced Linux) is a security layer on RHEL-family systems that enforces strict rules about what each process can access. It’s valuable, but it sometimes blocks legitimate software and causes “permission denied” errors that aren’t obvious. This guide shows how to check SELinux status and disable it – temporarily or permanently – on CentOS, RHEL, AlmaLinux, Rocky Linux, and Fedora.<\/span><\/p>\n

⚠<\/span> Before you disable SELinux completely, consider setting it to permissive mode instead. Permissive keeps SELinux active and logs what it would have blocked, so you can fix the real problem without losing the security layer. Fully disabling SELinux removes a meaningful protection – only do it if you have a specific reason.<\/strong><\/span><\/div>\n

Check the Current SELinux Status<\/span><\/strong><\/h2>\n

First, see what mode SELinux is in:<\/span><\/p>\n

sestatus<\/span>\r\n# or, for just the current mode:<\/span>\r\ngetenforce<\/span><\/pre>\n
You’ll see one of three states: Enforcing (rules are applied), Permissive (rules are logged but not applied), or Disabled (SELinux is off).<\/span><\/p>\n
Disable SELinux Temporarily (Until Reboot)<\/span><\/strong><\/h2>\n
To switch SELinux to permissive mode immediately, without a reboot:<\/span><\/p>\n
sudo setenforce 0<\/span>\r\n# confirm:<\/span>\r\ngetenforce # should return: Permissive<\/span><\/pre>\n
This is the recommended first step for troubleshooting – it reverts to enforcing on the next reboot, so you can’t lock yourself out permanently. Use sudo setenforce 1 to turn enforcing back on.<\/span><\/p>\n
Disable SELinux Permanently<\/span><\/strong><\/h2>\n
To change the mode across reboots, edit the SELinux config file:<\/span><\/p>\n
sudo nano \/etc\/selinux\/config<\/span><\/pre>\n
Find the SELINUX line and set it to permissive (recommended) or disabled:<\/span><\/p>\n
# for permissive (safer):<\/span>\r\nSELINUX=permissive<\/span>\r\n\r\n# or to fully disable:<\/span>\r\nSELINUX=disabled<\/span><\/pre>\n
Save the file and reboot for the change to take effect:<\/span><\/p>\n
sudo reboot<\/span><\/pre>\n
Verify After Reboot<\/span><\/strong><\/h2>\n
getenforce<\/span>\r\n# returns Permissive or Disabled, matching your config<\/span><\/pre>\n
FAQ<\/span><\/h2>\n
Q: How do I check if SELinux is enabled? – Run sestatus or getenforce. The output shows Enforcing, Permissive, or Disabled.<\/span><\/p>\n
Q: Should I disable SELinux or set it to permissive? – Permissive is usually the better choice: it keeps SELinux active and logs what it would block, so you can fix issues without losing the security layer. Disable it fully only when necessary.<\/span><\/p>\n
Q: How do I disable SELinux without rebooting? – Run sudo setenforce 0 to switch to permissive mode immediately. This reverts on reboot; to make it permanent, edit \/etc\/selinux\/config.<\/span>