linux的selinux

/etc/selinux/config，其中的配置修改为：

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of these two values:
# targeted - Targeted processes are protected,
# minimum - Modification of targeted policy. Only selected processes are protected.
# mls - Multi Level Security protection.
SELINUXTYPE=targeted

修改完selinux的配置文件，必须重启系统，才能生效。

 

如何修改selinux完，即时生效：

getenforce 查看selinux设置，默认为Enforcing。

setenforce 0，修改模式为Permissive。