SELinux和防火墙关闭

1   临时关闭SELinux

setenforce 0

[root@localhostbin]# getenforce

Enforcing

[root@localhostbin]# setenforce 0

[root@localhostbin]# getenforce

Permissive

 

2  开机关闭SELinux

[root@localhost bin]# vim/etc/selinux/config

 

# This filecontrols the state of SELinuxon the system.

# SELINUX= can takeone of these threevalues:

#    enforcing- SELinux security policy is enforced.

#    permissive- SELinux prints warnings instead of enforcing.

#    disabled- No SELinux policy is loaded.

SELINUX=disabled

# SELINUXTYPE= cantake one of these twovalues:

#    targeted- Targeted processes are protected,

#    mls- Multi Level Security protection.

SELINUXTYPE=targeted

 

3  查看防火墙状态

[root@localhostbin]# service iptables status

表格：filter

Chain INPUT (policyACCEPT)

num target    prot optsource              destination        

1   ACCEPT    all -- 0.0.0.0/0           0.0.0.0/0          stateRELATED,ESTABLISHED

2   ACCEPT    icmp -- 0.0.0.0/0           0.0.0.0/0          

3   ACCEPT    all -- 0.0.0.0/0           0.0.0.0/0          

4   ACCEPT    tcp -- 0.0.0.0/0           0.0.0.0/0           state NEWtcp dpt:22

5   REJECT    all -- 0.0.0.0/0           0.0.0.0/0          reject-with icmp-host-prohibited

 

Chain FORWARD(policy ACCEPT)

num target    prot optsource              destination        

1   REJECT    all -- 0.0.0.0/0           0.0.0.0/0          reject-withicmp-host-prohibited

 

Chain OUTPUT(policy ACCEPT)

num target    prot optsource              destination        

[root@localhostbin]# chkconfig iptables --list

iptables       0:关闭  1:关闭 2:启用  3:启用  4:启用 5:启用  6:关闭

 

4  关闭防火墙

[root@localhostbin]# chkconfig iptables off

[root@localhostbin]# chkconfig iptables --list

iptables       0:关闭  1:关闭 2:关闭  3:关闭  4:关闭 5:关闭  6:关闭