RedHat 7 关闭防火墙及SElinux

http://blog.itpub.net/12707874/viewspace-2141432/

RedHat 7.x 默认不再用iptables管理防火墙，相关命令如下：

一、关闭防火墙

1. 查看防火墙状态
   systemctl status firewalld

2. 实时关闭（重启恢复）
   systemctl stop firewalld

3. 查看防火墙服务是否开机启动
   systemctl is-enabled firewalld

4. 永久关闭
   systemctl disable firewalld

二、关闭SELinux

1. 查看当前SELinux状态
   getenforce

2. 实时关闭（重启恢复）
   setenforce 0

3. 永久关闭
   vim /etc/selinux/config

#This file controls the state of SELinux on the system.
#SELINUX= can take one of these three values:
#enforcing - SELinux security policy is enforced.
#permissive - SELinux prints warnings instead of enforcing.
#disabled - No SELinux policy is loaded.

SELINUX=permissive #修改为disabled

#SELINUXTYPE= can take one of three two values:
#targeted - Targeted processes are protected,
#minimum - Modification of targeted policy. Only selected processes are protected.
#mls - Multi Level Security protection.

SELINUXTYPE=targeted

---

1、在之前的版本中关闭防火墙等服务的命令是

service iptables stop

/etc/init.d/iptables stop

2、RHEL7开始，使用systemctl工具来管理服务程序，包括了service和chkconfig

systemctl list-unit-files|grep enabled

查看防火墙状态。
systemctl status firewalld

临时关闭防火墙命令。重启电脑后，防火墙自动起来。
systemctl stop firewalld

永久关闭防火墙命令。重启后，防火墙不会自动启动。
systemctl disable firewalld

打开防火墙命令。
systemctl enable firewalld