selinux详解

标签：selinux；linux

查看selinux配置文件

[root@localhost ~]# cat  /etc/selinux/config

# This file controls the state of SELinux on the system.

# SELINUX= can take one of these three values:

#     enforcing - SELinux security policy is enforced.

#     permissive - SELinux prints warnings instead of enforcing.

#     disabled - No SELinux policy is loaded.

SELINUX=enforcing

# SELINUXTYPE= can take one of these two values:

#     targeted - Targeted processes are protected,

#     mls - Multi Level Security protection.

SELINUXTYPE=targeted

修改selinux为关闭状态

方法一

[root@localhost ~]# vi /etc/selinux/config

# This file controls the state of SELinux on the system.

# SELINUX= can take one of these three values:

#     enforcing - SELinux security policy is enforced.

#     permissive - SELinux prints warnings instead of enforcing.

#     disabled - No SELinux policy is loaded.

SELINUX=disabled 

# SELINUXTYPE= can take one of these two values:

#     targeted - Targeted processes are protected,

#     mls - Multi Level Security protection.

SELINUXTYPE=targeted

在vi下按“i”进行编辑，讲enforcing改为disabled

按“esc”退出编辑模式，“：wq ” 保存退出

检查：cat /etc/selinux/config

方法二

设置：sed -i s#SELINUX=enforcing#SElINUX=disabled#g /etc/selinux/config

检查：grep "disable" /etc/selinux/config

以上永久关闭selinux，重启生效

查看selinux状态：

[root@localhost ~]# getenforce 

Enforcing

临时关闭

[root@localhost ~]# setenforce 0

[root@localhost ~]# getenforce 

Permissive

即时生效

selinux详解

标签：selinux；linux

原文地址：http://zzzhbr.blog.51cto.com/6480548/1912812