Description

Specify whether SELinux enforces its rules upon boot. 0 means that SELinux will just log policy violations but wil not deny access to anything. 1 means that the enforcement will be fully enabled with denials as well as logging. The default value is 0.

The value can be changed at runtime via the /selinux/enforce file.