Setting or Switching SELinux Policies
You can configure the default policy type by editing the
/etc/selinux/config
file and setting the value of the the
SELINUXTYPE
directive to targeted
or mls
.
Note:
You can't change the policy type of a running system.
Before switching from one policy to another, change the SELinux mode to
permissive
. On first boot after changing the policy type, SELinux might
relabel all files, which can take some time. Relabeling while in enforcing
mode might prevent confined domains from accessing files, which would stop the system from
starting correctly.