rhel 7之 selinux

在安装数据库的时候，默认都会关闭selinux，以下的命令需要我们记住，在排错的时候可能会用到。不能什么命令都去查看文档，要专业。

1、版本

[root@roidb01 ~]# uname -a
Linux roidb01 3.10.0-123.el7.x86_64 #1 SMP Mon May 5 11:16:57 EDT 2014 x86_64 x86_64 x86_64 GNU/Linux
[root@roidb01 ~]# cat /etc/redhat-release 
Red Hat Enterprise Linux Server release 7.0 (Maipo)
[root@roidb01 ~]#

2、查看命令

[root@roidb01 ~]# getenforce  ##查看selinux 状态
Disabled
[root@roidb01 ~]# 
[root@roidb01 ~]# setenforce 0  ##临时关闭selinux 
setenforce: SELinux is disabled
[root@roidb01 ~]# 
[root@roidb01 ~]# sestatus   ##查看selinux 状态
SELinux status:                 disabled
[root@roidb01 ~]# 

3、配置文件

[root@roidb01 ~]# cat /etc/selinux/config

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=disabled   ##默认为enforcing ,修改为disable，重启操作系统init 6
# SELINUXTYPE= can take one of these two values:
#     targeted - Targeted processes are protected,
#     minimum - Modification of targeted policy. Only selected processes are protected. 
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted 

本文转自 roidba 51CTO博客，原文链接：http://blog.51cto.com/roidba/2071856，如需转载请自行联系原作者