#TechTipThursday: SELinux is enabled by default on Rocky Linux. Before you disable it, learn what it's telling you.
getenforce -- check current mode
sudo ausearch -m avc -ts recent -- see recent denials
sudo sealert -a /var/log/audit/audit.log -- human-readable denial explanations
sudo setenforce 0 -- permissive mode for troubleshooting only
Learning to read SELinux logs beats turning it off every time.
#RockyLinux #Linux #TechTipThursday #SELinux #SysAdmin
Rocky Linux :rockylinux:
npub1lc…wlp7e
2026-06-11 14:52:00 UTC
Author Public Key
npub1lcl9p2qa9d9au087jm94g5at79lheyvm59dvx07zawv0dx5jmkzs0wlp7eSeen on
wss://relay.momostr.pinkPublished at
2026-06-11 14:52:00 UTCEvent JSON
{
"id": "a745fa41692fec652d5febdee16a00a40c890090e7d92886306f9eecb9b2dbe2",
"pubkey": "fe3e50a81d2b4bde3cfe96cb5453abf17f7c919ba15ac33fc2eb98f69a92dd85",
"created_at": 1781189520,
"kind": 1,
"tags": [
[
"t",
"linux"
],
[
"t",
"sysadmin"
],
[
"proxy",
"https://fosstodon.org/@rockylinux/116732036434168996",
"web"
],
[
"t",
"rockylinux"
],
[
"t",
"selinux"
],
[
"t",
"techtipthursday"
],
[
"proxy",
"https://fosstodon.org/users/rockylinux/statuses/116732036434168996",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://fosstodon.org/users/rockylinux/statuses/116732036434168996",
"pink.momostr"
],
[
"-"
]
],
"content": "#TechTipThursday: SELinux is enabled by default on Rocky Linux. Before you disable it, learn what it's telling you.\n\ngetenforce -- check current mode\nsudo ausearch -m avc -ts recent -- see recent denials\nsudo sealert -a /var/log/audit/audit.log -- human-readable denial explanations\nsudo setenforce 0 -- permissive mode for troubleshooting only\n\nLearning to read SELinux logs beats turning it off every time.\n#RockyLinux #Linux #TechTipThursday #SELinux #SysAdmin",
"sig": "d7772dd8326a6e2b064df58c39b1418c9f2ee5fda289601b1191d0ef2f8f3257e3a97b0f317f1ccd4d4eda75228516a4167fc9d53fbb4060a7bac85a97bf90b4"
}