enabling MLS policy in RHEL 7.2 per RHEL7 SELinux Admin's Guide denies root login via tty, serial

Solution In Progress - Updated -


  1. Follow instructions from RHEL 7 SELinux Admin's Guide to enable MLS
  2. Login as root after the relabel/reboot
  3. Execute setenforce 1
  4. Try to login as root via a normal tty console or serial console and login fails


  • Red Hat Enterprise Linux 7.2
    • initscripts with version <= initscripts-9.49.30-1.el7_2.3

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content