version, each use will encounter some problems that are not known. Record down the process and learn some of the pits encountered. *system version: CentOS Linux release 7.3.1611 (Core)*system kernel: 3.10.0-514.el7.x86_64#获取selinux状态信息[email protected] ~]# GetenforceEnforcing#临时关闭selinux, the same as the original version.[email protected] ~]# Setenforce 0[email protected] ~]# GetenforcePermissive#问题就是在修改配置文
Tags: dockerWhen installing Dockerce 17.09, it was found that the official provided the Docker-ce-selinux package, prone to confusion, explained hereDockerce installation Method,wget https://download.docker.com/linux/centos/7/x86_64/stable/Packages/docker-ce-17.09.0.ce-1.el7.centos.x86_ 64.rpmyum localinstall-y docker-ce-17.00.0.ce-1.el7.centos.x86_64.rpmAs above, Yum will automatically install container-selinux
It is almost certain that everyone has heard of SELinux (more accurately, tried to disable it), and even some past experiences have caused you to be biased against SELinux. However, with the increasing 0-day security vulnerability, it may be time to find out the eight-year-old Mandatory Access Control System (MAC) in the Linux kernel.
SELinux and Mandatory Access
SELinux (Security-EnhancedLinux) is the implementation of mandatory access control by the National Security Agency (NSA) and the most outstanding new Security subsystem in Linux history. Under such access control system restrictions, a process can only access the files required in its tasks. SELinux is installed on Fedora and RedHatEnterpriseLinux by default. Although S
Disable selinux and selinux
1. View The SELinux status:Getenforce
Enforcing)
Disable)
1. Disable SELinux (it will still take effect after restart)
Modify vi/etc/sysconfig/selinux
[Root @ developer ~] # Vi/etc/selinux/config
Centos6 view SELinux status close SELinuxSELinux (Security-Enhanced Linux) is the implementation of mandatory access control by the National Security Agency (NSA) and the most outstanding New Security Subsystem in Linux history. Under such access control system restrictions, a process can only access the files required in its tasks. SELinux is installed on Fedora and Red Hat Enterprise Linux by default.
Al
Familiar with SELinux and SELinux Functions
Now, playing with the SELinux system has some value. For example, we use a strictly qualified ora Core 4 release. Most of these examples can basically run on Red hat Enterprise Linux version 4 or Fedora Core 5. Although it may be a little different, you may be able to run it using another release. "Getting
Tips for viewing SELinux status and SELinux disabling methodsMost people who use SELinux-ready releases, such as Fedora, Red Hat Enterprise Linux (RHEL), Debian, or Centos. They enable SELinux in the kernel and provide a customizable security policy. They also provide many user-layer libraries and tools that can use th
Cause of errorConfiguring off SELinux, resulting in mis-operationThe value of the "SELinux" parameter in the configuration file/etc/selinux/config should be modified,# selinux=enforcing Original Configurationselinux=disabled correctHowever, the "Selinuxtype" is mistakenly considered as "
View SeLinux status and disable SeLinux in CentOS
View SELinux status:
1./usr/sbin/sestatus-v # If The SELinux status parameter is enabled, it is enabled.
SELinux status: enabled
2. getenforce # You can also use this command to check
Disable
To view the SELinux status:1,/usr/sbin/sestatus-v # #如果SELinux The status parameter is enabled is turned onSELinux status:enabled2. Getenforce # #也可以用这个命令检查To turn off SELinux:1, temporarily shut down (do not restart the machine):Setenforce 0 # #设置SELinux become permissive mode# #setenforce 1 set
SELinux (security-enhanced Linux) is the United States National Security Agency (NSA) implementation of mandatory access control, is the most outstanding new security subsystem in the history of Linux. Under the restriction of this access control system, the process can only access files that are needed in his tasks. SELinux is installed on Fedora and Red Hat Enterprise Linux by default.Although
SELinux (security-enhanced Linux) is the United States National Security Agency (NSA) implementation of mandatory access control, is the most outstanding new security subsystem in the history of Linux. Under the restriction of this access control system, the process can only access files that are needed in his tasks. SELinux is installed on Fedora and Red Hat Enterprise Linux by default.Although
SELinux (security-enhanced Linux) is the United States National Security Agency (NSA) implementation of mandatory access control, is the most outstanding new security subsystem in the history of Linux. Under the restriction of this access control system, the process can only access files that are needed in his tasks. SELinux is installed on Fedora and Red Hat Enterprise Linux by default.Although
What is SELINUX ?, SELINUX?SELinux (Security-Enhanced Linux) is the implementation of mandatory access control by the National Security Agency (NSA) and the most outstanding New Security Subsystem in Linux history. NSA developed an access control system with the help of the Linux community. Under the restriction of this access control system, processes can only a
Tags: off off selinux command usr ESS mis need detail openLinux Nginx failed to startJob for Nginx.service failed because the control process exited with error code. See "Systemctl Status Nginx.service" and "Journalctl-xe" for details.Need to close SELinuxTo view the SELinux status:1,/usr/sbin/sestatus-v # #如果SELinux The status parameter is enabled is turned onSE
View SELinux status: 1./usr/sbin/sestatus-v # if the SELinuxstatus parameter is enabled, SELinuxstatus is enabled: enabled2, getenforce # You can also use this command to check and disable SELi... "/> SELinux status: 1./usr/sbin/sestatus-v # if the SELinux status parameter is enabled, SELinux status is enabled: enabled2, getenforce # You can also use this
To view the SELinux status:1,/usr/sbin/sestatus-v # #如果SELinux The status parameter is enabled is turned onSELinux status:enabled2. Getenforce # #也可以用这个命令检查To turn off SELinux:1, temporarily shut down (do not restart the machine):Setenforce 0 # #设置SELinux become permissive mode# #setenforce 1 set
To view the SELinux status:1,/usr/sbin/sestatus-v # #如果SELinux The status parameter is enabled is turned onSELinux status:enabled2. Getenforce # #也可以用这个命令检查To turn off SELinux:1, temporarily shut down (do not restart the machine):Setenforce 0 # #设置SELinux become permissive mode# #setenforce 1 set
Centos7 modifying SELinux boot causes Faild to load SELinux policy freezing errorBefore the selinux shut down, this time to open selinux, so modify the/etc/selinux/config file, and then restart, it will not be able to open the machine,An error occurred: Faild to load
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.