selinux permissive

Management of SELinux# # # #安全上下文的查看与更改 # #Vim/etc/sysconfig/selinux # # #更改状态[Email protected] ~]# systemctl status vsftpd # #查看vsftpd服务状态VSFTPD.SERVICE-VSFTPD FTP Daemonloaded:loaded (/usr/lib/systemd/system/vsftpd.service; disabled)Active:inactive (Dead)[Email protected] ~]# systemctl start vsftpd[Email protected] ~]# Systemctl stop Firewalld[Email protected] ~]# Systemctl enable VSFTPDln-s '/usr/lib/sys

This is a SQUID proxy server (a desktop, installed Redhat 5.4 64-bit operating system), every day 4 o'clock in the afternoon a server through the FTP upload host database inspection report to the agent pc in a user home directory under the Xunjian directory, This PC then sends the inspection report to the group member by sending the mail the way, carries on the inspectionThis is the background, before the SELinux set for

SELinux Properties of files1. Temporary modification of File type propertiesIncorrect file Type property is the main cause of common selinux denial of access1) Modify the SELinux properties of the file:[email protected] ~]# Touch Test.file # #新建文件[Email protected] ~]# ls-z Test.file # #查看文件的SELinux属性-rw-r--r--. Root ro

Modify selinux = disabled in the/etc/SELINUX/config file, and then restart the server. Disable SELinux in Linux 1) it takes effect permanently after restart: Modify selinux = disabled in the/etc/SELINUX/config file, and then restart the server. 2) it takes effect immedia

Primary management of SELinux 1. What is a SELinuxSelinux : kernel-level enhanced firewall2. How to manage SELinux levelsSELinux turned on or off Vim/etc/sysconfig/selinuxselinux=disabled off stateselinux=enforcing Mandatory Stateselinux=permissive Warning statusGetenforce View statuswhen SELinux is turned onSetenf

restart the kernel to take effectSELinux Management levelSELinux turned on or offVim/etc/sysconfig/selinux650) this.width=650; "src=" Https://s4.51cto.com/wyfs02/M00/9D/C6/wKioL1mFu5Tw9U-TAACAA0XD-xg180.png "title=" Screenshot from 2017-08-05 20-35-12.png "alt=" Wkiol1mfu5tw9u-taacaa0xd-xg180.png "/>Selinux=disabled off StateSelinux=enforcing Mandatory StateSelinux=permissive Warning StatusGetenforce View

operations not expressly authorized are prohibited7.3 SELinux ConfigurationWhether SELinux is enabled: defined in the/etc/selinux/config fileStatus of SELinux:Enforcing: Mandatory, each restricted process is bound to be limitedPermissive: Enabled, each restricted process violation will not be banned, but will be recorded in the audit logDisabled: DisableRelated

httpd access to the outside. To turn it on:Setsebool-p httpd_can_network_connect=1If you are unfamiliar with SELinux, you can also directly modify the system configuration file/etc/sysconfig/selinux, global shutdown:#This filecontrolsthestateofselinuxonthesystem.#selinux= cantakeoneofthesethreevalues:# enforcing-selinuxsecuritypolicyisenforced.#

Understand SELinux, set to file SELinux security files, copy, move the impact of SELinux rules, set Apache, VSFTPD SELinux rules1. Understanding SELinux1) DAC: Refers to the control of a user's access to resources, i.e., permissionsMac:selinux tags, restrict the process access to resources, process is owned by the user

1 What when SELinuxSELinux, kernel-level enhanced firewall2 How to manage SELinux levelsSELinux turned on or off)Vim/etc/sysconfig/selinuxselinux=disabled## off Stateselinux=enforcing## Mandatory Stateselinux=permissive## Warning Statusgetenforce## View Statuswhen selinux is turned onSetenforce 0|1## changing the SELinux