When you install the Intel C + + and Fortran compilers in CentOS6.2, you encounter a situation where the forced mode of selinux is not enforceable.
Need to turn off selinux or change enforcing to permissive mode, query to some data, first on the selinux of several patterns, and its relationship and conversion methods t
When installing Intel's C + + and Fortran compilers in CentOS6.2, you encounter a situation in which SELinux enforcement mode is not enforceable.Need to close selinux or change the enforcing to permissive mode, after querying some of the data, the selinux of several modes, and its relationship and conversion methods to
SELinux has a total of 3 states.1. SELinux configuration file:/etc/selinux/config# This file controls the state of the SELinux on the system.3 # selinux= can take one of these three values:4 # Enforcing-selinux Security policy is
. However, with the extensive application of SELinux over the past eight years, the current SELinux policy can still meet the security and convenience requirements in general desktop and program development environments. Taking the just-released Fedora 15 as an example, the author builds a complete entertainment environment (including multiple third-party native Linux games and Wine games) and development e
version, each use will encounter some problems that are not known. Record down the process and learn some of the pits encountered. *system version: CentOS Linux release 7.3.1611 (Core)*system kernel: 3.10.0-514.el7.x86_64#获取selinux状态信息[email protected] ~]# GetenforceEnforcing#临时关闭selinux, the same as the original version.[email protected] ~]# Setenforce 0[email protected] ~]# GetenforcePermissive#问题就是在修改配置文
the detailed status of selinux. if it is enable, it indicates that selinux is enabled.
#/Usr/sbin/sestatus-v
View selinux mode
# Getenforce
2. disable selinux
2.1: permanently shut down (this will take effect after the server is restarted)
# Sed-I's/SELINUX = enforcing/
When you execute certain programs in a Linux environment, you occasionally encounter a situation in which the SELinux enforcement mode is not enforceable, in which case you need to close selinux or change the enforcing to permissive mode before executing.SELinux is a mandatory access control (MAC) system available in the Linux kernelThe following is a description
Disable selinux and selinux
1. View The SELinux status:Getenforce
Enforcing)
Disable)
1. Disable SELinux (it will still take effect after restart)
Modify vi/etc/sysconfig/selinux
[Root @ developer ~] # Vi/etc/selinux/config
Centos6 view SELinux status close SELinuxSELinux (Security-Enhanced Linux) is the implementation of mandatory access control by the National Security Agency (NSA) and the most outstanding New Security Subsystem in Linux history. Under such access control system restrictions, a process can only access the files required in its tasks. SELinux is installed on Fedora and Red Hat Enterprise Linux by default.
Al
Tips for viewing SELinux status and SELinux disabling methodsMost people who use SELinux-ready releases, such as Fedora, Red Hat Enterprise Linux (RHEL), Debian, or Centos. They enable SELinux in the kernel and provide a customizable security policy. They also provide many user-layer libraries and tools that can use th
Cause of errorConfiguring off SELinux, resulting in mis-operationThe value of the "SELinux" parameter in the configuration file/etc/selinux/config should be modified,# selinux=enforcing Original Configurationselinux=disabled correctHowever, the "Selinuxtype" is mistakenly considered as "
to control which contexts can be accessed by which domains.In SELinux, there are a number of policy models preset, and we don't usually need to define our own policies unless we need to protect some services or programs ourselves.In Centos/rhel, which uses the target strategy by default, then what is the target strategy?The target policy defines that only the target process is throttled by SELinux, non-tar
SELinux tolerant mode (permissive) forced mode (enforcing) off (disabled) conversion between several modes when installing Intel's C + + and Fortran compilers in CentOS6.2 Encountered a situation where the mandatory mode of selinux is not enforceable,Need to close selinux or change the enforcing to
Tags: dockerWhen installing Dockerce 17.09, it was found that the official provided the Docker-ce-selinux package, prone to confusion, explained hereDockerce installation Method,wget https://download.docker.com/linux/centos/7/x86_64/stable/Packages/docker-ce-17.09.0.ce-1.el7.centos.x86_ 64.rpmyum localinstall-y docker-ce-17.00.0.ce-1.el7.centos.x86_64.rpmAs above, Yum will automatically install container-selinux
View SeLinux status and disable SeLinux in CentOS
View SELinux status:
1./usr/sbin/sestatus-v # If The SELinux status parameter is enabled, it is enabled.
SELinux status: enabled
2. getenforce # You can also use this command to check
Disable
To view the SELinux status:1,/usr/sbin/sestatus-v # #如果SELinux The status parameter is enabled is turned onSELinux status:enabled2. Getenforce # #也可以用这个命令检查To turn off SELinux:1, temporarily shut down (do not restart the machine):Setenforce 0 # #设置SELinux become permissive m
Most people who use SELinux use SELinux-ready distributions, such as Fedora, Red Hat Enterprise Linux (RHEL), Debian, or Centos. They all enable selinux in the kernel, provide a customizable security policy, and provide many libraries and tools at the user level, all of which can use SELinux functionality. So how does
Tags: selinux status and off SELinuxTo view the SELinux status:1,/usr/sbin/sestatus-v # #如果SELinux The status parameter is enabled is turned onSELinux status:enabled2. Getenforce # #也可以用这个命令检查To turn off SELinux:1, temporarily shut down (do not restart the machine):Setenforce 0 # #设置
Some Linux by default is SELinux enabled, we can choose to turn selinux on or off when installing the operating system, but how to turn it on and off after installing the system?There is a SELinux file under/etc/sysconf, using VI to open, change the value of the SELinux item in it.
and block suspicious behavior. Permissive -SELinux prints warnings instead of enforcing.#Linux系统下selinux所设置的安全策略都会被启动, but only security warnings are logged, but suspicious behavior is not blocked.Disabled -No SELinux policy is loaded.#禁用selinux, all
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.