Shulou(Shulou.com)06/01 Report--

Most people do not understand the knowledge of this article "how to use setsebool commands in Linux", so the editor summarizes the following contents, detailed contents, clear steps, and has a certain reference value. I hope you can get something after reading this article. Let's take a look at this "how to use setsebool commands in Linux" article.

The setsebool command is used to modify the Boolean values of the rules within the SElinux policy. The setsebool command and getsebool command are a set of tools for SELinux to modify and query Boolean values.

Syntax setsebool [- P] Boolean value = [0 | 1] option-P: write the setting value directly to the configuration file, and the setting data will take effect in the future. Example

Allow vsvtp anonymous user write permissions:

Setsebool-P allow_ftpd_anon_write=1

If you want your ftp users to access their home directory, you need to open:

Setsebool-P ftp_home_dir 1

If you want to run vsftpd as daemon, you need to turn on:

Setsebool-P ftpd_is_daemon 1

HTTP is set to allow the setting of cgi:

Setsebool-P httpd_enable_cgi 1

Allow user HHTP to access their home directory, which is limited to the user's home directory home page:

Setsebool-P httpd_enable_homedirs 1chcon-R-t httpd_sys_content_t ~ user/public_html

Allow httpd to access the terminal:

Setsebool-P httpd_tty_comm 1

Turn off Selinux's protection for httpd process daemons:

Setsebool-P httpd_disable_trans 1service httpd restart

Update selinux settings for named and master:

Setsebool-P named_write_master_zones 1

Turn off process daemon protection for named:

Setsebool-P named_disable_trans 1service named restart

Selinux sets the native NFS share to read-only:

Setsebool-P nfs_export_all_ro 1

SElinux makes the native NFS share readable and writable:

Setsebool-P nfs_export_all_rw 1

If you want to share the home directory of the remote NFS to this machine, you need to turn on:

Setsebool-P use_nfs_home_dirs 1

If the samba server shares a directory to multiple domains, you need to:

Setsebool-P allow_smbd_anon_write=1

When the samba server wants to share the home directory:

Setsebool-P samba_enable_home_dirs 1

If you need to use the home directory of the remote samba server on your local computer:

Setsebool-P use_samba_home_dirs 1

Turn off selinux's process daemon protection for samba:

Setsebool-P smbd_disable_trans 1service smb restart

When allowing other rsync users to write:

Setsebool-P allow_rsync_anon_write=1

Allow the system to use kerberos:

Setsebool-P rsync_disable_trans 1

When the system is working in a nis environment:

Setsebool-P allow_ypbind 1 above is about the content of this article on "how to use setsebool commands in Linux". I believe we all have a certain understanding. I hope the content shared by the editor will be helpful to you. If you want to know more about the relevant knowledge, please follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.