Shulou(Shulou.com)06/01 Report--

This article introduces to you what is the specific method of shutting down SElinux in Linux system, the content is very detailed, interested friends can refer to it, hope to be helpful to you.

SELinux is a domain-type model (domain-type) based mandatory access control (MAC) security system, which is written by NSA and designed to include kernel modules in the kernel.

About selinux: SELinux (Security-Enhanced Linux) is the implementation of mandatory access control by the National Security Agency (NSA). It is the most outstanding new security subsystem in the history of Linux.

NSA developed an access control system with the help of the Linux community. Under the restriction of this access control system, the process can only access the files needed in his task.

SELinux is a mandatory access control (MAC) security system based on domain-type model (domain-type). It is written and designed by NSA as a kernel module to be included in the kernel. Some security-related applications are patched by SELinux, and finally there is a corresponding security policy.

Any program has complete control over its resources. Suppose a program is going to throw files containing potentially important information into the / tmp directory, and no one can stop him in the case of DAC. SELinux provides better access control than traditional UNIX permissions.

Linux View selinux method: view the current Selinux status:

[root@localhost ~] # getenforce Enforcing temporarily shuts down Selinux:

[root@localhost ~] # setenforce 0 [root@localhost ~] # getenforce Permissive [root@localhost ~] # permanently close Selinux: [root@localhost ~] # vim / etc/sysconfig/selinux # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing-SELinux security policy is enforced. # permissive-SELinux prints warnings instead of enforcing. # disabled-No SELinux policy is loaded. SELINUX=enforcingdisabled # SELINUXTYPE= can take one of three two values: # targeted-Targeted processes are protected, # minimum-Modification of targeted policy. Only selected processes are protected. # mls-Multi Level Security protection. SELINUXTYPE=targete will take the following:

Change SELINUX=enforcing to:

SELINUX=disabled Note: modify Selinux to shut down permanently, you must restart the server.

What is Linux system Linux is a free-to-use and free-spread UNIX-like operating system, is a POSIX-based multi-user, multi-task, multi-threaded and multi-CPU operating system, using Linux can run major Unix tools, applications and network protocols.

On the Linux system to shut down SElinux specific methods to share here, I hope that the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.