Which command is used to change the state of SELinux?

The command used to change the state of SELinux is setenforce. This command allows a user with appropriate permissions to switch SELinux between enforcing mode and permissive mode. When SELinux is in enforcing mode, it actively blocks access based on the defined policies, while in permissive mode, it only logs policy violations but does not block access.

Understanding the SELinux modes is crucial: enforcing provides active security to the system by enforcing the policies, while permissive allows for testing and debugging of SELinux policies without causing disruption. This dual functionality makes setenforce a powerful tool for managing SELinux behavior.

The other commands serve different purposes. getenforce provides the current status of SELinux, but does not change it. sestatus gives a comprehensive overview of the SELinux status along with other context information. On the other hand, chage is related to changing user password expiry information and is not relevant to SELinux. Thus, setenforce is correctly identified as the command for changing the SELinux state.