| Security settings |
| Classification |
Command |
Options |
Annotations |
Security Policy SELinux |
Setenforce |
Number (0,1) |
Set SELinux status, 0 off, 1 on |
| Getenforce |
|
Displays the current SELinux status, enforcing indicates enabled, permissive indicates off |
| Firewall |
Iptables |
Three tables: Filter,nat,mangle |
Example: Iptables-a input-p tcp--dport 22-j ACCEPT |
| -A (-i,-d) |
Add (insert, delete) a rule |
| INPUT (Output,forward) |
Chain name |
| -S |
Source Address |
| -P |
Protocol (TCP,UDP,ICMP) |
| --sport/--dport |
followed by Source port/Destination port |
| -D |
Followed by Destination IP |
| -j |
followed by the action that triggered the rule, drop/reject/accept |
| Shutdown/Restart |
Shutdown |
Options |
Shutdown |
| -T |
Specify how many seconds to shut down |
| -R |
Specify time to restart after shutdown |
| -H |
Specify time off |
| -C |
Cancel an ongoing shutdown |
| Halt |
Options |
Hang Up |
| -P |
Shutdown |
| Reboot |
|
Restart =shutdown-r Now |
Linux System Common Commands Summary (vii) Security settings