设置linux服务,Linux服务的seLinux设置

下面是一些 收集来的 Linux服务的seLinux设置 命令

===ftp===//If you want to share files anonymously

chcon -R -t public_content_t /var/ftp

//If you want to setup a directory where you can upload files

chcon -t public_content_rw_t /var/ftp/incoming

You must also turn on the boolean allow_ftpd_anon_write

setsebool -P allow_ftpd_anon_write=1

//If you are setting up this machine as a ftpd server and wish to allow users to access their home directorories

setsebool -P ftp_home_dir 1

//If you want to run ftpd as a daemon

setsebool -P ftpd_is_daemon 1

//You can disable SELinux protection for the ftpd daemon

setsebool -P ftpd_disable_trans 1

===httpd===

//If you want a particular domain to write to the public_content_rw_t domain

setsebool -P allow_httpd_anon_write=1

or

setsebool -P allow_httpd_sys__anon_write=1

//httpd can be setup to allow cgi s to be executed

setsebool -P httpd_enable_cgi 1

//If you want to allow access to users home directories

setsebool -P httpd_enable_homedirs 1

chcon -R -t httpd_sys_content_t ~user/public_html

//httpd is allowed access to the controling terminal

setsebool -P httpd_tty_comm 1

//such that one httpd service can not interfere with another

setsebool -P httpd_unified 0

//loadable modules run under the same context as httpd

setsebool -P httpd_builtin_ing 0

//httpd s are allowed to connect out to the network

setsebool -P httpd_can_network_connect 1

// You can disable suexec transition

setsebool -P httpd_suexec_disable_trans 1

//You can disable SELinux protection for the httpd daemon by executing

setsebool -P httpd_disable_trans 1

service httpd restart

===named===

//If you want to have named update the master zone files

setsebool -P named_write_master_zones 1

//You can disable SELinux protection for the named daemon by executing

setsebool -P named_disable_trans 1

service named restart

===nfs===

//If you want to setup this machine to share nfs partitions read only

setsebool -P nfs_export_all_ro 1

//If you want to share files read/write

setsebool -P nfs_export_all_rw 1

//If you want to use a remote NFS server for the home directories on this machine

setsebool -P use_nfs_home_dirs 1

===samba===

//If you want to share files other than home directorie

chcon -t samba_share_t /directory 【ＬＩＮＵＸ公社　www.LinuxIDC.com　】

//If you want to share files with multiple domains

setsebool -P allow_smbd_anon_write=1

//If you are setting up this machine as a Samba server and wish to share the home directories

setsebool -P samba_enable_home_dirs 1

//If you want to use a remote Samba server for the home directories on this machine

setsebool -P use_samba_home_dirs 1

//You can disable SELinux protection for the samba daemon by executing

setsebool -P smbd_disable_trans 1

service smb restart

===rsync===

//If you want to share files using the rsync daemon

chcon -t public_content_t /directories

//If you want to share files with multiple domains

setsebool -P allow_rsync_anon_write=1

//You can disable SELinux protection for the rsync daemon by executing

setsebool -P rsync_disable_trans 1

===kerberos===

//allow your system to work properly in a Kerberos environment

setsebool -P allow_kerberos 1

//If you are running Kerberos daemons kadmind or krb5kdc

setsebool -P krb5kdc_disable_trans 1

service krb5kdc restart

setsebool -P kadmind_disable_trans 1

service kadmind restart

===nis===

Allow your system to work properly in a NIS environment

setsebool -P allow_ypbind 1

总结

以上是生活随笔为你收集整理的设置linux服务,Linux服务的seLinux设置的全部内容，希望文章能够帮你解决所遇到的问题。

如果觉得生活随笔网站内容还不错，欢迎将生活随笔推荐给好友。