查看SELinux状态及关闭SELinux

一、查看SELinux状态:

1、我们可以通过查看配置文件的命令 cat /etc/selinux/config 来查看状态

[root@lill ~]# cat /etc/selinux/config 

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=enforcing
# SELINUXTYPE= can take one of these two values:
#     targeted - Targeted processes are protected,
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted 

发现SELinux共有3个状态enforcing (执行中)、permissive (不执行但产生警告)、disabled(关闭)。

2,也可以用这个命令检查:getenforce

[root@localhost /]# getenforce
Enforcing

3、也可以用下述命令;如果SELinux status参数为enabled即为开启状态

[root@localhost /]# /usr/sbin/sestatus -v
SELinux status:                 enabled

二、关闭SELinux:

1、临时关闭(重启机器后失效):

#setenforce 0设置为permissive模式;setenforce 1 设置为enforcing模式;
setenforce 0                  

2、永久关闭(需要重启机器):
sed -i s#SELINUX=enforcing#SELINUX=disabled# /etc/selinux/config
重启机器即可

    原文作者:老吉来了
    原文地址: https://blog.csdn.net/javazhouchon/article/details/119428372
    本文转自网络文章,转载此文章仅为分享知识,如有侵权,请联系博主进行删除。
点赞