日期:2014-05-16 浏览次数:21007 次
http://www.thegeekstuff.com/2009/06/how-to-disable-selinux-redhat-fedora-debian-unix/
?
On some of the Linux distribution SELinux is enabled by default, 
which may cause some unwanted issues, if you don’t understand how 
SELinux works and the fundamental details on how to configure it. I 
strongly recommend that you understand SELinux and implement it on your 
environment. But, until you understand the implementation details of 
SELinux you may want to disable it to avoid some unnecessary issues.?
To disable SELinux
 you can use any one of the 4 
different methods mentioned in this article.
The SELinux will enforce security policies including the mandatory 
access controls defined by the US Department of Defence using the Linux 
Security Module (LSM) defined in the Linux Kernel. Every files and 
process in the system will be tagged with specific labels that will be 
used by the SELinux. You can use ls -Z and view those labels as shown 
below.
# ls -Z /etc/ -rw-r--r--? root root? system_u:object_r:etc_t:s0?????? a2ps.cfg -rw-r--r--? root root? system_u:object_r:adjtime_t:s0?? adjtime -rw-r--r--? root root? system_u:object_r:etc_aliases_t:s0 aliases drwxr-x---? root root? system_u:object_r:auditd_etc_t:s0 audit drwxr-xr-x? root root? system_u:object_r:etc_runtime_t:s0 blkid drwxr-xr-x? root root? system_u:object_r:bluetooth_conf_t:s0 bluetooth drwx------? root root? system_u:object_r:system_cron_spool_t:s0 cron.d -rw-rw-r--? root disk? system_u:object_r:amanda_dumpdates_t:s0 dumpdates
To disable SELinux temporarily you have to modify the /selinux/enforce file as shown below. Please note that this setting will be gone after the reboot of the system.
# cat /selinux/enforce 1 # echo 0 > /selinux/enforce # cat /selinux/enforce 0
?
You can also use setenforce command as shown below to disable SELinux. 
Possible parameters to setenforce commands are: Enforcing , Permissive, 1
 (enable) or 0 (disable).
# setenforce 0
To disable the SELinux permanently, modify the /etc/selinux/config and set the SELINUX=disabled as shown below. One you make any changes to the /etc/selinux/config, reboot the server for the changes to be considered.
# cat /etc/selinux/config SELINUX=disabled SELINUXTYPE=targeted SETLOCALDEFS=0
?
Following are the possible values for the SELINUX 
variable
 in the /etc/selinux/config
 file
?
Following are the possible values for SELINUXTYPE 
variable
 in the /etc/selinux/config
 file. This indicates the 
type of policies that can be used for the SELinux.
If you can’t locate /etc/selinux/config file on your system, you can pass disable SELinux by passing it as parameter to the Grub Boot Loader as shown below.
?
# cat /boot/grub/grub.conf
default=0
timeout=5
splashimage=(hd0,0)/boot/grub/splash.xpm.gz
hiddenmenu
title Enterprise Linux E