Security settings |
Classification |
Command |
Options |
Annotations |
Security Policy SELinux |
Setenforce |
Number (0,1) |
Set SELinux status, 0 off, 1 on |
Getenforce |
|
Displays the current SELinux status, enforcing indicates enabled, permissive indicates off |
Firewall |
Iptables |
Three tables: Filter,nat,mangle |
Example: Iptables-a input-p tcp--dport 22-j ACCEPT |
-A (-i,-d) |
Add (insert, delete) a rule |
INPUT (Output,forward) |
Chain name |
-S |
Source Address |
-P |
Protocol (TCP,UDP,ICMP) |
--sport/--dport |
followed by Source port/Destination port |
-D |
Followed by Destination IP |
-j |
followed by the action that triggered the rule, drop/reject/accept |
Shutdown/Restart |
Shutdown |
Options |
Shutdown |
-T |
Specify how many seconds to shut down |
-R |
Specify time to restart after shutdown |
-H |
Specify time off |
-C |
Cancel an ongoing shutdown |
Halt |
Options |
Hang Up |
-P |
Shutdown |
Reboot |
|
Restart =shutdown-r Now |
Linux System Common Commands Summary (vii) Security settings