chuleta_selinux
setenforce Enforcing setenforce permissive
Run the following command to list all current rules in your filesystem:
semanage fcontext -l
List all available file contexts (which you may choose from when assigning contexts to your files):
seinfo -t
List all user:
seinfo -u
List all user roles:
seinfo -r
Selinux para apache
Permitir a apache leer y escribir en un directorio
chcon -R -t httpd_sys_rw_content_t /var/spool/pandora/data_in # lectura/escritura en data-in para httpd
Hacer cambios permanentes
restorecon -rnv /var/spool/pandora/data_in # hacer cambios permanentes
Permitir mysql remoto
setsebool httpd_can_network_connect_db 1 # Temporal setsebool -P httpd_can_network_connect_db 1 # Persistente
chuleta_selinux.txt · Last modified: by etfiat
