This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
модуль_selinux [2020/06/22 13:46] val [Конфигурация] |
модуль_selinux [2020/07/16 08:15] val |
||
---|---|---|---|
Line 4: | Line 4: | ||
* [[https://defcon.ru/os-security/1264/|Знакомимся с SELINUX и пытаемся понять, почему Дэн Уолш плачет]] | * [[https://defcon.ru/os-security/1264/|Знакомимся с SELINUX и пытаемся понять, почему Дэн Уолш плачет]] | ||
+ | * [[https://max-ko.ru/14-upravlenie-selinux.html|Управление SELinux]] | ||
* [[http://itstickers.besthw.net/selinux-%D0%B1%D0%BB%D0%BE%D0%BA%D0%B8%D1%80%D1%83%D0%B5%D1%82-zabbix-%D0%B0%D0%B3%D0%B5%D0%BD%D1%82/|SELinux блокирует Zabbix-агент]] | * [[http://itstickers.besthw.net/selinux-%D0%B1%D0%BB%D0%BE%D0%BA%D0%B8%D1%80%D1%83%D0%B5%D1%82-zabbix-%D0%B0%D0%B3%D0%B5%D0%BD%D1%82/|SELinux блокирует Zabbix-агент]] | ||
Line 17: | Line 18: | ||
<code> | <code> | ||
# sestatus | # sestatus | ||
- | |||
- | # yum install policycoreutils-python-utils | ||
- | |||
- | # man semanage | ||
- | </code><code> | ||
- | ... | ||
- | semanage {import,export,login,user,port,interface,module,node,fcontext,boolean,permissive,dontaudit} | ||
- | </code><code> | ||
- | # semanage fcontext -l | ||
</code> | </code> | ||
Line 39: | Line 31: | ||
# chcon -v -t httpd_sys_content_t /var/www/html/index.html | # chcon -v -t httpd_sys_content_t /var/www/html/index.html | ||
- | или | + | |
+ | или более правильно | ||
+ | |||
+ | # yum install policycoreutils-python-utils | ||
+ | # semanage fcontext -l | grep '/var/www' | ||
# yum install setroubleshoot | # yum install setroubleshoot | ||
# sealert -a /var/log/audit/audit.log | # sealert -a /var/log/audit/audit.log | ||
- | # /sbin/restorecon -v /var/www/html/index.html | + | |
+ | # restorecon -v /var/www/html/index.html | ||
</code> | </code> | ||