(linuxSElinux命令详解setsebool命令.docxVIP

配置VSFTPD时本地用户无法切换用到命令setsebool -P ftpd_disable_trans=1setsebool命令查询了相关的资料是selinux的相关设置项这是SELinux的设置命令.其实 man 一下setsebool也知道了:NAMEsetsebool– set SELinuxboolean value在不熟悉SELnux前，把SELinux关掉也可以的。有时间研究下SELinux。Redhat从FC3开始，就使用了SELinux来增强安全，但是使用起来有时候太繁琐，就想关闭它，但是如果安装服务器的时候开始没有图形界面，还真很难找到地方可以关闭。正确方法如下：修改/etc/selinux/config文件中的SELINUX=” 为 disabled ，然后重启。2009年8。22更新下面是一些收集来的设置命令===ftp===//If you want to share files anonymouslychcon -R -t public_content_t /var/ftp//If you want to setup a directory where you can upload fileschcon -t public_content_rw_t /var/ftp/incomingYou must also turn on the booleanallow_ftpd_anon_writesetsebool -P allow_ftpd_anon_write=1//If you are setting up this machine as a ftpd server and wish to allow users to access their home directororiessetsebool -P ftp_home_dir 1//If you want to run ftpd as a daemonsetsebool -P ftpd_is_daemon 1//You can disable SELinux protection for the ftpd daemonsetsebool -P ftpd_disable_trans 1===httpd===//If you want a particular domain to write to the public_content_rw_t domainsetsebool -P allow_httpd_anon_write=1orsetsebool -P allow_httpd_sys__anon_write=1//httpd can be setup to allow cgi s to be executedsetsebool -P httpd_enable_cgi 1//If you want to allow access to users home directoriessetsebool -P httpd_enable_homedirs 1chcon -R -t httpd_sys_content_t ~user/public_html//httpd is allowed access to the controling terminalsetsebool -P httpd_tty_comm 1//such that one httpd service can not interfere with anothersetsebool -P httpd_unified 0//loadable modules run under the same context as httpdsetsebool -P httpd_builtin_ing 0//httpd s are allowed to connect out to the networksetsebool -P httpd_can_network_connect 1// You can disable suexec transitionsetsebool -P httpd_suexec_disable_trans 1//You can disable SELinux protection for the httpd daemon by executingsetsebool -P httpd_disable_trans 1service httpd restart===named===//If you want to have named update the master zone filessetsebool -P named_write_master_zones 1//You can