{"id":589,"date":"2022-10-08T12:07:12","date_gmt":"2022-10-08T04:07:12","guid":{"rendered":"http:\/\/blog.nonot.cn\/?p=589"},"modified":"2024-07-08T12:46:40","modified_gmt":"2024-07-08T04:46:40","slug":"selinux-%e5%bc%80%e6%94%be%e5%92%8c%e5%85%b3%e9%97%ad%e7%ab%af%e5%8f%a3%ef%bc%88%e4%b8%8d%e5%85%b3%e9%97%adselinux%ef%bc%89","status":"publish","type":"post","link":"https:\/\/blog.nonot.cn\/index.php\/2022\/10\/08\/selinux-%e5%bc%80%e6%94%be%e5%92%8c%e5%85%b3%e9%97%ad%e7%ab%af%e5%8f%a3%ef%bc%88%e4%b8%8d%e5%85%b3%e9%97%adselinux%ef%bc%89\/","title":{"rendered":"SELinux \u5f00\u653e\u548c\u5173\u95ed\u7aef\u53e3\uff08\u4e0d\u5173\u95edSELinux\uff09"},"content":{"rendered":"

1.\u4e0b\u8f7d\u5de5\u5177semanage<\/p>\n

yum provides semanage   \u67e5\u770b\u8be5\u547d\u4ee4\u5305\u542b\u5728\u54ea\u4e2a\u8f6f\u4ef6\u5305\u91cc<\/p>\n

\"\"<\/p>\n

 <\/p>\n

\u622a\u56fe\u7ea2\u6846\u90e8\u5206\u5c31\u662f\u5305\u542b\u8be5\u547d\u4ee4\u7684\u5b89\u88c5\u5305\u3002<\/p>\n

\u76f4\u63a5\u5b89\u88c5\u8fd9\u4e2a\u5b89\u88c5\u5305\u5c31\u53ef\u4ee5\u4e86 yum install policy…     \u53ef\u4ee5\u7528tab\u8865\u5168\u3002<\/p>\n

2.\u67e5\u770b\u7aef\u53e3 <\/p>\n

 semanage port -l  \u67e5\u770b\u6240\u6709\u5f00\u653e\u7aef\u53e3<\/p>\n

semanage port -l | grep 5000  \u67e5\u770b5000\u7aef\u53e3 <\/p>\n

semanage port -l | grep http_port_t   \u67e5\u770bselinux\u9488\u5bf9http\u7684\u7b56\u7565\u5f00\u653e\u7684\u7aef\u53e3\u3002<\/p>\n

 <\/p>\n

3.\u6dfb\u52a0<\/p>\n

semanage port -a -t http_port_t -p tcp 5002     http\u7b56\u7565\u6dfb\u52a0\u5f00\u653e5002\u7aef\u53e3\u3002<\/p>\n

\u5982\u679c5002\u5df2\u7ecf\u5b58\u5728\u4e0e\u5176\u4ed6\u534f\u8bae\uff0c\u5219\u4f1a\u62a5\u5982\u4e0b\u9519\u8bef<\/p>\n

\"\"<\/p>\n

 <\/p>\n

 \u5982\u679c\u62a5\u6b64\u9519\u8bef\uff0c\u5c06 -a \u6539\u6210 -m \u5c31\u53ef\u4ee5\u4e86\u3002-m \u4e0d\u4f1a\u5f71\u54cd\u5230\u5176\u4ed6\u7b56\u7565\u4f7f\u75285002\u7aef\u53e3\u3002<\/p>\n

4.\u5173\u95ed<\/p>\n

semanage port -d -t http_port_t -p tcp 5002 \u5173\u95edhttp\u7b56\u7565\u76845002\u7aef\u53e3\u3002<\/p>\n

-d\u662f\u5173\u95ed\u7b56\u7565\u7684\u8fd9\u4e2a\u7aef\u53e3\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

1.\u4e0b\u8f7d\u5de5\u5177semanage yum provides se…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-589","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/posts\/589","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/comments?post=589"}],"version-history":[{"count":1,"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/posts\/589\/revisions"}],"predecessor-version":[{"id":1183,"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/posts\/589\/revisions\/1183"}],"wp:attachment":[{"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/media?parent=589"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/categories?post=589"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/tags?post=589"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}