1.6.1.2 Ensure the SELinux state is enforcing (Scored)

Level 2 - Server 
Level 2 - Workstation

Set SELinux to enable when the system is booted.

SELinux must be enabled at boot time in to ensure that the controls it provides are in effect at all times.

Run the following commands and ensure output matches:

# grep SELINUX=enforcing /etc/selinux/config 
SELINUX=enforcing
 
# sestatus 
SELinux status: enabled 
Current mode: enforcing 
Mode from config file: enforcing

Edit the /etc/selinux/config file to set the SELINUX parameter:

SELINUX=enforcing