selinux限制linux程序运行,selinux 不限制nginx

当安装完nginx后，配置正确后，有时候会发现nginx转发却不起作用，并出现如下界面

404 Not Found

nginx/1.12.1

这个时候，可以考虑一下是否是selinux限制了访问。

查看selinux状态

[root@localhost conf.d]# sestatus

SELinux status: enabled

SELinuxfs mount: /sys/fs/selinux

SELinux root directory: /etc/selinux

Loaded policy name: targeted

Current mode: permissive

Mode from config file: disabled

Policy MLS status: enabled

Policy deny_unknown status: allowed

Max kernel policy version: 28

[root@localhost conf.d]# setenforce 1

[root@localhost conf.d]#

查询 selinux 运行模式

[root@localhost conf.d]# getenforce

Enforcing

[root@localhost conf.d]#

临时关闭selinux

# setenforce 0 #关闭 Selinux

# setenforce 1 #开启 Selinux

临时关闭以后，此时nginx就可以访问了

永久关闭selinux，永久关闭需要重启才能生效

编辑vim /etc/selinux/config

[root@localhost conf.d]# vim /etc/selinux/config

# This file controls the state of SELinux on the system.

# SELINUX= can take one of these three values:

# enforcing - SELinux security policy is enforced.

# permissive - SELinux prints warnings instead of enforcing.

# disabled - No SELinux policy is loaded.

#SELINUX=enforcing

SELINUX=disabled

# SELINUXTYPE= can take one of three two values:

# targeted - Targeted processes are protected,

# minimum - Modification of targeted policy. Only selected processes are protected.

# mls - Multi Level Security protection.

SELINUXTYPE=targeted

允许nginx 白名单

yum install policycoreutils-python

cat /var/log/audit/audit.log | grep nginx | grep denied | audit2allow -M mynginx

semodule -i mynginx.pp