SELinux在强制状态开关策略（getsebool）

• 查看SELinux开关策略

[root@desktop0 ~]# getsebool -a

abrt_anon_write --> off
abrt_handle_event --> off
abrt_upload_watch_anon_write --> on
antivirus_can_scan_system --> off
antivirus_use_jit --> off
auditadm_exec_content --> on
authlogin_nsswitch_use_ldap --> off
authlogin_radius --> off
authlogin_yubikey --> off

• 查看 samba策略

[root@desktop0 yum.repos.d]# getsebool -a | grep samba
samba_create_home_dirs --> off
samba_domain_controller --> off
samba_enable_home_dirs --> off
samba_export_all_ro --> off
samba_export_all_rw --> off
samba_portmapper --> off
samba_run_unconfined --> off
samba_share_fusefs --> off
samba_share_nfs --> off

• 修改samba策略

[root@desktop0 yum.repos.d]# setsebool -P samba_export_all_rw=on
[root@desktop0 yum.repos.d]# getsebool -a | grep samba_export_all_rw
samba_export_all_rw --> on