linux-SElinux命令详解setsebool命令.docx

《linux-SElinux命令详解setsebool命令.docx》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、配置VSFTPD时本地用户无法切换用到命令setsebool-Pftpd_disable_trans=1setsebool命令查询了相关的资料是selinux的相关设置项这是SELinux的设置命令.其实man一下setsebool也知道了:NAMEsetsebool–setSELinuxbooleanvalue在不熟悉SELnux前，把SELinux关掉也可以的。有时间研究下SELinux。Redhat从FC3开始，就使用了SELinux来增强安全，但是使用起来有时候太繁琐，就想关闭它，但是如果安装服务器

2、的时候开始没有图形界面，还真很难找到地方可以关闭。正确方法如下：修改/etc/selinux/config文件中的SELINUX=”"为disabled，然后重启。2009年8。22更新下面是一些收集来的设置命令===ftp===//Ifyouwanttosharefilesanonymouslychcon-R-tpublic_content_t/var/ftp//Ifyouwanttosetupadirectorywhereyoucanuploadfileschcon-tpublic_content_rw

3、_t/var/ftp/incomingYoumustalsoturnonthebooleanallow_ftpd_anon_writesetsebool-Pallow_ftpd_anon_write=1//Ifyouaresettingupthismachineasaftpdserverandwishtoallowuserstoaccesstheirhomedirectororiessetsebool-Pftp_home_dir1//Ifyouwanttorunftpdasadaemonsetsebool-

4、Pftpd_is_daemon1//YoucandisableSELinuxprotectionfortheftpddaemonsetsebool-Pftpd_disable_trans1===httpd===//Ifyouwantaparticulardomaintowritetothepublic_content_rw_tdomainsetsebool-Pallow_httpd_anon_write=1orsetsebool-Pallow_httpd_sys__anon_write=1//httpdca

5、nbesetuptoallowcgistobeexecutedsetsebool-Phttpd_enable_cgi1//Ifyouwanttoallowaccesstousershomedirectoriessetsebool-Phttpd_enable_homedirs1chcon-R-thttpd_sys_content_t~user/public_html//httpdisallowedaccesstothecontrolingterminalsetsebool-Phttpd_tty_comm1//

6、suchthatonehttpdservicecannotinterferewithanothersetsebool-Phttpd_unified0//loadablemodulesrununderthesamecontextashttpdsetsebool-Phttpd_builtin_ing0//httpdsareallowedtoconnectouttothenetworksetsebool-Phttpd_can_network_connect1//Youcandisablesuexectransit

7、ionsetsebool-Phttpd_suexec_disable_trans1//YoucandisableSELinuxprotectionforthehttpddaemonbyexecutingsetsebool-Phttpd_disable_trans1servicehttpdrestart===named===//Ifyouwanttohavenamedupdatethemasterzonefilessetsebool-Pnamed_write_master_zones1//Youcandisa

8、bleSELinuxprotectionforthenameddaemonbyexecutingsetsebool-Pnamed_disable_trans1servicenamedrestart===nfs===//Ifyouwanttosetupthismachinetosharenfspartitionsreadonlysetsebool-Pnfs_export_all_ro1//Ifyouwanttosh