Shulou(Shulou.com)06/01 Report--

Today, the editor will share with you the relevant knowledge points about how to close and open SELinux. The content is detailed and the logic is clear. I believe most people still know too much about this knowledge, so share this article for your reference. I hope you can get something after reading this article. Let's take a look at it.

SELinux is mainly developed by the National Security Agency. Linux kernel version 2.6 and above have integrated SELinux module. The structure and configuration of SELinux are very complex, and there are a lot of conceptual things, so it is difficult to learn. Many Linux system administrators find it troublesome to shut down SELinux.

Script code #! / bin/bash #-+-# * Filename: selinux.sh # * Revision: 2.0 # * Date: 2017-09-0 Author: Aubin # * Description: #-+-# www.shuaiguoxia.com#path=/app/selinuxselinux= `sed-rn "/ ^ (SELINUX=). *\ $/ p" $path`case $1 inenforcing | en) sed-ri "s @ ^ (SELINUX=). *\ $@\ 1enforcing@g" $path if [$selinux= = 'SELINUX=disabled'] Then read-p "SELinux enforcing. You need reboot system (yes or no): "input [$input = = 'yes'-o $input = =' y'] & & reboot | | echo" please Manual operation reboot "else echo" SELinux enforcing. " Fi;; permissive | per | pe) sed-ri "s @ ^ (SELINUX=). *\ $@\ 1permissive@g" $path if [$selinux = = 'SELINUX=disabled']; then read-p "SELinux permissive. You need reboot system (yes or no): "input [$input = = 'yes'-o $input = =' y'] & & reboot | | echo" please Manual operation reboot "else echo" SELINUX permissive "fi;; disabled | dis | di) sed-ri" s @ ^ (SELINUX=). *\ $@\ 1disabled@g "$path if [$selinux = = 'SELINUX=enforcing']; then read-p" SELinux permissive. You need reboot system (yes or no): "input [$input = = 'yes'-o $input = =' y'] & & reboot | | echo" please Manual operation reboot "else echo" SELINUX disabled "fi;; l | a) echo `sed-nr's @ (^ SELINUX=.*) @\ 1Secretp' $path`;; help |-- help) echo" $0 [enforcing | permissive | disabled] " *) echo "$0 [enforcing | permissive | disabled]";; esac

Script testing

Judge the user's location variables (input parameters) according to the case statement, and then achieve different effects according to different parameters.

When SELinux switches between enforcing state and disabled state, it must be restarted to take effect, so to determine the status of the user's previous SELinux in the script, ask the user whether the process restarts the operating system.

These are all the contents of the article "how to turn SELinux off and on". Thank you for reading! I believe you will gain a lot after reading this article. The editor will update different knowledge for you every day. If you want to learn more knowledge, please pay attention to the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.