以上命令将显示当前的SELinux状态,包括正在加载的策略。
Configuring SELinux(配置SELinux)(targeted针对的、minimum最小化的、mls多级保护)
System administrators can manipulate(操作) the SELinux settings via the /etc/selinux/config
file. Here, you can set the SELinux mode and choose the policy to load at boot time.
系统管理员可以通过/etc/selinux/config
文件操作SELinux设置。在这里,您可以设置SELinux模式并选择在启动时加载的策略。
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=enforcing
# SELINUXTYPE= can take one of three values:
# targeted - Targeted p