linux7selinux,rhel 7之 selinux

在安装数据库的时候，默认都会关闭selinux，以下的命令需要我们记住，在排错的时候可能会用到。不能什么命令都去查看文档，要专业。

1、版本

[root@roidb01 ~]# uname -a

Linux roidb01 3.10.0-123.el7.x86_64 #1 SMP Mon May 5 11:16:57 EDT 2014 x86_64 x86_64 x86_64 GNU/Linux

[root@roidb01 ~]# cat /etc/redhat-release

Red Hat Enterprise Linux Server release 7.0 (Maipo)

[root@roidb01 ~]#

2、查看命令

[root@roidb01 ~]# getenforce ##查看selinux 状态

Disabled

[root@roidb01 ~]#

[root@roidb01 ~]# setenforce 0 ##临时关闭selinux

setenforce: SELinux is disabled

[root@roidb01 ~]#

[root@roidb01 ~]# sestatus ##查看selinux 状态

SELinux status: disabled

[root@roidb01 ~]#

3、配置文件

[root@roidb01 ~]# cat /etc/selinux/config

# This file controls the state of SELinux on the system.

# SELINUX= can take one of these three values:

# enforcing - SELinux security policy is enforced.

# permissive - SELinux prints warnings instead of enforcing.

# disabled - No SELinux policy is loaded.

SELINUX=disabled ##默认为enforcing ,修改为disable，重启操作系统init 6

# SELINUXTYPE= can take one of these two values:

# targeted - Targeted processes are protected,

# minimum - Modification of targeted policy. Only selected processes are protected.

# mls - Multi Level Security protection.

SELINUXTYPE=targeted