Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Use the seinfo command of linux to query SELinux policy rules

2025-02-25 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Servers >

Share

Shulou(Shulou.com)06/02 Report--

This article will explain in detail the rules of using linux's seinfo command to query SELinux strategy. The editor thinks it is very practical, so I share it with you as a reference. I hope you can get something after reading this article.

The seinfo command is used to query how many relevant rules are provided by the policy of the SELinux. The focus of whether a subject process can read the target file resources is the policy of the SELinux and the rules in the policy, and then deal with the security context of each target file through the definition of the rule, especially the "type" part. SELinux policy and rule management related commands: seinfo command, sesearch command, getsebool command, setsebool command, semanage command.

Syntax format: seinfo [parameters]

Common parameters:

-a list all SELinux status, rule Boolean values, identities, roles, types, etc.-t list all types of SELinux (type)-r list types of all roles (role) in SELinux-u list categories of all identities (user) in SELinux-b list categories of all rules (Boolean)

Reference example

List all the information about the status, rule Boolean, identity, role, type, and so on, of SELinux:

[root@linuxcool] # seinfo-a

List the categories of all types of SELinux (type):

[root@linuxcool ~] # seinfo-t

List the categories of all roles (role) in SELinux:

[root@linuxcool ~] # seinfo-r

List the types of all identities (user) of SELinux:

[root@linuxcool] # seinfo-u

List the categories of all rules (Boolean values):

[root@linuxcool] # seinfo-b

List the rules related to httpd:

[root@linuxcool ~] # seinfo-b | grep httpd so much about using linux's seinfo command to query SELinux policy rules. I hope the above content can be helpful to you and learn more. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Servers

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report