SELINU 常用设置
来源:互联网 发布:c语言字符串前几位比较 编辑:程序博客网 时间:2024/06/15 20:20
===ftp===
//如果你想共享文件存储
chcon -R -t public_content_t /var/ftp
//如果你想安装的目录,您可以上传文件
chcon -t public_content_rw_t /var/ftp/incoming
You must also turn on the boolean allow_ftpd_anon_write
setsebool -P allow_ftpd_anon_write=1
//如果你是建立本机作为一个ftpd服务器和希望允许用户访问他们的主页目录
setsebool -P ftp_home_dir 1
//如果您想运行ftpd以daemon方式运行
setsebool -P ftpd_is_daemon 1
//您可以禁用SELinux的保护ftpd守护进程
setsebool -P ftpd_disable_trans 1
===httpd===
//如果你想有一个特定的域写入 public_content_rw_t domain
setsebool -P allow_httpd_anon_write=1
or
setsebool -P allow_httpd_sys_script_anon_write=1
//httpd can be setup to allow cgi scripts to be executed
setsebool -P httpd_enable_cgi 1
//If you want to allow access to users home directories
setsebool -P httpd_enable_homedirs 1
chcon -R -t httpd_sys_content_t ~user/public_html
//httpd is allowed access to the controling terminal
setsebool -P httpd_tty_comm 1
//such that one httpd service can not interfere with another
setsebool -P httpd_unified 0
//loadable modules run under the same context as httpd
setsebool -P httpd_builtin_scripting 0
//httpd scripts are allowed to connect out to the network
setsebool -P httpd_can_network_connect 1
// You can disable suexec transition
setsebool -P httpd_suexec_disable_trans 1
//You can disable SELinux protection for the httpd daemon by executing
setsebool -P httpd_disable_trans 1
service httpd restart
===named===
//If you want to have named update the master zone files
setsebool -P named_write_master_zones 1
//You can disable SELinux protection for the named daemon by executing
setsebool -P named_disable_trans 1
service named restart
===nfs===
//If you want to setup this machine to share nfs partitions read only
setsebool -P nfs_export_all_ro 1
//If you want to share files read/write
setsebool -P nfs_export_all_rw 1
//If you want to use a remote NFS server for the home directories on this machine
setsebool -P use_nfs_home_dirs 1
===samba===
//If you want to share files other than home directorie
chcon -t samba_share_t /directory
//If you want to share files with multiple domains
setsebool -P allow_smbd_anon_write=1
//If you are setting up this machine as a Samba server and wish to share the home directories
setsebool -P samba_enable_home_dirs 1
//If you want to use a remote Samba server for the home directories on this machine
setsebool -P use_samba_home_dirs 1
//You can disable SELinux protection for the samba daemon by executing
setsebool -P smbd_disable_trans 1
service smb restart
===rsync===
//If you want to share files using the rsync daemon
chcon -t public_content_t /directories
//If you want to share files with multiple domains
setsebool -P allow_rsync_anon_write=1
//You can disable SELinux protection for the rsync daemon by executing
setsebool -P rsync_disable_trans 1
===kerberos===
//allow your system to work properly in a Kerberos environment
setsebool -P allow_kerberos 1
//If you are running Kerberos daemons kadmind or krb5kdc
setsebool -P krb5kdc_disable_trans 1
service krb5kdc restart
setsebool -P kadmind_disable_trans 1
service kadmind restart
===nis===
Allow your system to work properly in a NIS environment
setsebool -P allow_ypbind 1
- SELINU 常用设置
- 4.【SELinux学习笔记】SELinu策略语言
- linux常用设置
- phpmyadmin常用选项设置
- phpmyadmin常用选项设置
- vsftp常用设置
- ant的常用设置
- 破解常用断点设置
- SQL常用设置
- vim 常用设置
- vi常用设置
- vim 常用设置
- VI 常用设置
- windows2003系统常用设置
- vim 常用设置
- FCKEditor常用设置
- FCKEditor常用设置
- nginx常用设置
- CSDN 2010 最新 Bug
- Sqlserver得到汉字拼音首字母存储过程
- 【转帖】堆和栈的区别
- 时间片 与 Ticker
- ubuntu 编译时遇到 cannot find -lncurses 使用 解决办法
- SELINU 常用设置
- 发现Java之美
- Java 静态代理和动态代理
- JUNIT使用资料
- symbian 字体设置
- linux 内存管理之基础篇
- 向GOOGLE学习
- 如何查看自己的资源分?
- IOCP