Site Tools


chuleta_selinux

setenforce Enforcing setenforce permissive

Run the following command to list all current rules in your filesystem:

semanage fcontext -l

List all available file contexts (which you may choose from when assigning contexts to your files):

seinfo -t

List all user:

seinfo -u

List all user roles:

seinfo -r

Selinux para apache

Permitir a apache leer y escribir en un directorio

chcon -R -t httpd_sys_rw_content_t /var/spool/pandora/data_in # lectura/escritura en data-in para httpd

Hacer cambios permanentes

restorecon -rnv /var/spool/pandora/data_in  # hacer cambios permanentes

Permitir mysql remoto

setsebool httpd_can_network_connect_db 1         # Temporal
setsebool -P  httpd_can_network_connect_db 1     # Persistente
chuleta_selinux.txt · Last modified: by etfiat