linux-selinux命令详解setsebool命令

《linux-selinux命令详解setsebool命令》由会员上传分享，免费在线阅读，更多相关内容在应用文档-天天文库。

1、配置VSFTPD时本地用户无法切换用到命令setsebool-Pftpd_disable_trans=1setsebool命令查询了相关的资料是selinux的相关设置项这是SELinux的设置命令.其实man一下setsebool也知道了:NAMEsetsebool–setSELinuxbooleanvalue在不熟悉SELnux前，把SELinux关掉也可以的。有时间研究下SELinux。Redhat从FC3开始，就使用了SELinux来增强安全，但是使用起来有时候太繁琐，就想关闭它，但是如果安装服务器的时候开始没有图形界面，还真很难找到地方可以关闭。正确方法如下：修改/etc

2、/selinux/config文件中的SELINUX=”"为disabled，然后重启。2009年8。22更新下面是一些收集来的设置命令===ftp===//Ifyouwanttosharefilesanonymouslychcon-R-tpublic_content_t/var/ftp//Ifyouwanttosetupadirectorywhereyoucanuploadfileschcon-tpublic_content_rw_t/var/ftp/incomingYoumustalsoturnonthebooleanallow_ftpd_anon_writesetsebool

3、-Pallow_ftpd_anon_write=1//Ifyouaresettingupthismachineasaftpdserverandwishtoallowuserstoaccesstheirhomedirectororiessetsebool-Pftp_home_dir1//Ifyouwanttorunftpdasadaemonsetsebool-Pftpd_is_daemon1//YoucandisableSELinuxprotectionfortheftpddaemonsetsebool-Pftpd_disable_trans1===httpd===//Ifyouwa

4、ntaparticulardomaintowritetothepublic_content_rw_tdomainsetsebool-Pallow_httpd_anon_write=1orsetsebool-Pallow_httpd_sys__anon_write=1//httpdcanbesetuptoallowcgistobeexecutedsetsebool-Phttpd_enable_cgi1//Ifyouwanttoallowaccesstousershomedirectoriessetsebool-Phttpd_enable_homedirs1chcon-R-thttpd

5、_sys_content_t~user/public_html//httpdisallowedaccesstothecontrolingterminalsetsebool-Phttpd_tty_comm1//suchthatonehttpdservicecannotinterferewithanothersetsebool-Phttpd_unified0//loadablemodulesrununderthesamecontextashttpdsetsebool-Phttpd_builtin_ing0//httpdsareallowedtoconnectouttothenetwor

6、ksetsebool-Phttpd_can_network_connect1//Youcandisablesuexectransitionsetsebool-Phttpd_suexec_disable_trans1//YoucandisableSELinuxprotectionforthehttpddaemonbyexecutingsetsebool-Phttpd_disable_trans1servicehttpdrestart===named===//Ifyouwanttohavenamedupdatethemasterzonefilessetsebool-Pnamed_wri

7、te_master_zones1//YoucandisableSELinuxprotectionforthenameddaemonbyexecutingsetsebool-Pnamed_disable_trans1servicenamedrestart===nfs===//Ifyouwanttosetupthismachinetosharenfspartitionsreadonlysetsebool-Pnfs_export_all_ro1//Ifyouwanttosh