Shulou(Shulou.com)06/01 Report--

This article mainly explains how to use the chcon command. Interested friends may wish to take a look. The method introduced in this paper is simple, fast and practical. Let Xiaobian take you to learn how to use the chcon command.

The chcon command modifies the security context of an object (file), such as user, role, type, and security level. That is, change the security environment of each file to the specified environment. When using the-reference option, sets the security environment of the specified file to be the same as the reference file. The chcon command is located in/usr/bin/chcon.

Syntax chcon [options]... Environmental documentation... chcon [options]... [-u User] [-r Role] [-l Scope] [-t Type] File... chcon [options]... --reference= reference file file... Option-h, --no-dereference: Affects symbolic links rather than referenced files. --reference= reference file: Use the security environment of the specified reference file instead of the specified value. -R, --recursive: Recursive processing of all files and subdirectories. -v, --verbose: Displays diagnostic information for all files processed. -u, --user= user: Sets the target security environment for the specified user. - r, --role= Role: Sets the target security environment for the specified role. - t, --type= Type: Sets the target security environment of the specified type. -l, --range= Range: Sets the target security environment for the specified range.

** The following options are used to set how to traverse the directory hierarchy when the-R option is specified

-H: Traverse symbolic link if command-line argument is a symbolic link to directory. -L: Traverse every symbolic link encountered to the directory. -P: Does not traverse any symbolic links (default). --help: Display this help message and exit. --version: Display version information and exit. examples

** If you want to share this ftp to anonymous users, you need to enable the following:

chcon -R -t public_content_t /var/ftp

** If you want your FTP directory to be able to upload files, SELINUX needs to be configured:

chcon -t public_content_rw_t /var/ftp/incoming

** Allow user HHTP to access their home directory, this setting is limited to the user's home directory home page:

setsebool -P httpd_enable_homedirs 1 chcon -R -t httpd_sys_content_t ~user/public_html

** If you want to share the samba directory with other users, you need to set:

chcon -t samba_share_t /directory

** When sharing the rsync directory:

chcon -t public_content_t /directories At this point, I believe that everyone has a deeper understanding of "how to use the chcon command," may wish to actually operate it! Here is the website, more related content can enter the relevant channels for inquiry, pay attention to us, continue to learn!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.