HCKZ知识库

Linux临时或者永久关闭selinux

搭建测试环境或者搭建特殊环境需要临时/永久关闭关闭selinux

查看方法

[root@master ~]# getenforce 
  Enforcing

输出为“Enforcing”则证明selinux正在运行

输出为“Disabled”则证明selinux已经关闭

若输出为“Enforcing” 想临时关闭:

[root@master ~]# setenforce 0

若想永久禁用selinux则需要编辑配置文件

[root@master ~]# vim /etc/selinux/config

将SELINUX=enforcing改成SELINUX=disabled即可永久关闭

原配置文件:

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=enforcing
# SELINUXTYPE= can take one of these three values:
#     targeted - Targeted processes are protected,
#     minimum - Modification of targeted policy. Only selected processes are protected. 
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted

更改后的配置文件

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
# SELINUX=enforcing
SELINUX=disabled
# SELINUXTYPE= can take one of these three values:
#     targeted - Targeted processes are protected,
#     minimum - Modification of targeted policy. Only selected processes are protected. 
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted

评论

暂无评论。

提交后需管理员审核通过才会显示