1. 程式人生 > >centos 7.0 查看selinux狀態|關閉|開啟

centos 7.0 查看selinux狀態|關閉|開啟

version direct AS ont cti roc str rec height

Linux在安裝好之後通常SELinux都是出於默認開啟的狀態,開啟的情況下會導致一些服務的安裝不成功。

在不需要的情況下完全可以關閉掉,下面是在centos 7.0裏面如何查看,關閉selinux。

查看selinux狀態

Linux在安裝好之後通常SELinux都是出於默認開啟的狀態,開啟的情況下會導致一些服務的安裝不成功。
在不需要的情況下完全可以關閉掉,下面是在centos 7.0裏面如何查看,關閉selinux。
查看selinux狀態

[root@localhost ~]# sestatus  

SELinux status:                 enabled  
SELinuxfs mount:                /sys/fs/selinux  
SELinux root directory:         /etc/selinux  
Loaded policy name:             targeted  
Current mode:                   enforcing  
Mode from config file:          enforcing  
Policy MLS status:              enabled  
Policy deny_unknown status:     allowed  
Max kernel policy version:      28 

臨時關閉


[root@localhost ~]# setenforce 0 

永久關閉,可以修改配置文件/etc/selinux/config,將其中SELINUX設置為disabled。
 
[root@localhost ~]# cat /etc/selinux/config   


# This file controls the state of SELinux on the system.  
# SELINUX= can take one of these three values:  
#     enforcing - SELinux security policy is enforced.  
#     permissive - SELinux prints warnings instead of enforcing.  
#     disabled - No SELinux policy is loaded.  
#SELINUX=enforcing  
SELINUX=disabled  
# SELINUXTYPE= can take one of three two values:  
#     targeted - Targeted processes are protected,  
#     minimum - Modification of targeted policy. Only selected processes are protected.   
#     mls - Multi Level Security protection.  
SELINUXTYPE=targeted


[root@rdo ~]# sestatus  

SELinux status:                 disabled 

臨時關閉

[root@localhost ~]# setenforce 

永久關閉,可以修改配置文件/etc/selinux/config,將其中SELINUX設置為disabled

[root@localhost ~]# cat /etc/selinux/config         
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
#SELINUX=enforcing SELINUX=disabled
# SELINUXTYPE= can take one of three two values:
# targeted - Targeted processes are protected,
# minimum - Modification of targeted policy. Only selected processes are protected.
# mls - Multi Level Security protection. SELINUXTYPE=targeted
[root@rdo ~]# sestatus SELinux status: disabled

centos 7.0 查看selinux狀態|關閉|開啟