Hacker News new | ask | show | jobs
by fignews 1419 days ago
Wouldn’t `setenforce 0` be essentially “disabling” SELinux without a reboot?
1 comments

Puts it in 'permissive' mode, i.e. 'audit but don't deny'. Disabling (i.e. no auditing either, no record) requires a reboot I believe (a change to kernel param).