{"id":13667,"date":"2023-08-12T09:20:29","date_gmt":"2023-08-12T00:20:29","guid":{"rendered":"https:\/\/lab4ict.com\/system\/?p=13667"},"modified":"2023-08-25T06:21:57","modified_gmt":"2023-08-24T21:21:57","slug":"selinux%e3%81%ae%e5%9f%ba%e6%9c%ac%e6%93%8d%e4%bd%9c%e3%82%92%e3%81%be%e3%81%a8%e3%82%81%e3%82%8b%ef%bc%81","status":"publish","type":"post","link":"https:\/\/lab4ict.com\/system\/archives\/13667","title":{"rendered":"SELinux\u306e\u57fa\u672c\u64cd\u4f5c\u3092\u307e\u3068\u3081\u308b\uff01"},"content":{"rendered":"<p>SELinux\u306e\u57fa\u672c\u64cd\u4f5c\u3092\u307e\u3068\u3081\u307e\u3059\u3002<br \/>\n<!--more--><\/p>\n<h2>SELinux\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u5185\u5bb9\u3092\u78ba\u8a8d\u3059\u308b\uff01<\/h2>\n<p>SELinux\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u5185\u5bb9\u3092\u78ba\u8a8d\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"brush: plain; highlight: [1]; title: ; notranslate\" title=\"\">\r\n$ sudo cat \/etc\/selinux\/config\r\n\r\n# This file controls the state of SELinux on the system.\r\n# SELINUX= can take one of these three values:\r\n#     enforcing - SELinux security policy is enforced.\r\n#     permissive - SELinux prints warnings instead of enforcing.\r\n#     disabled - No SELinux policy is loaded.\r\nSELINUX=enforcing\r\n# SELINUXTYPE= can take one of these three values:\r\n#     targeted - Targeted processes are protected,\r\n#     minimum - Modification of targeted policy. Only selected processes are protected. \r\n#     mls - Multi Level Security protection.\r\nSELINUXTYPE=targeted\r\n<\/pre>\n<h2>SELinux\u306e\u52d5\u4f5c\u30e2\u30fc\u30c9\u3092\u78ba\u8a8d\u3059\u308b\uff01<\/h2>\n<p>SELinux\u306e\u52d5\u4f5c\u30e2\u30fc\u30c9\u3092\u78ba\u8a8d\u3057\u307e\u3059\u3002Enforcing\u30e2\u30fc\u30c9\u3067\u3042\u308b\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3059\u3002<\/p>\n<pre class=\"brush: plain; highlight: [1]; title: ; notranslate\" title=\"\">\r\n$ sudo getenforce\r\nEnforcing\r\n<\/pre>\n<h2>SELinux\u306e\u52d5\u4f5c\u30e2\u30fc\u30c9\u3092\u5909\u66f4\u3059\u308b\uff01\uff08Enforcing\u2192Permissive\uff09<\/h2>\n<p>SELinux\u306e\u52d5\u4f5c\u30e2\u30fc\u30c9\u3092\u4e00\u6642\u7684\u306bPermissive\u30e2\u30fc\u30c9\u306b\u5909\u66f4\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"brush: plain; highlight: [1,2]; title: ; notranslate\" title=\"\">\r\n$ sudo setenforce 0\r\n$ sudo getenforce\r\nPermissive\r\n<\/pre>\n<h2>SELinux\u306e\u52d5\u4f5c\u30e2\u30fc\u30c9\u3092\u5909\u66f4\u3059\u308b\uff01\uff08Permissive\u2192Enforcing\uff09<\/h2>\n<p>SELinux\u306e\u52d5\u4f5c\u30e2\u30fc\u30c9\u304cEnforcing\u30e2\u30fc\u30c9\u3067\u3042\u308b\u3053\u3068\u78ba\u8a8d\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"brush: plain; highlight: [1,2]; title: ; notranslate\" title=\"\">\r\n$ sudo setenforce 1\r\n$ sudo getenforce\r\nEnforcing\r\n<\/pre>\n<h2>\u304a\u308f\u308a\u306b<\/h2>\n<p>SELinux\u306e\u540c\u30b5\u30fc\u30e2\u5ea6\u306e\u78ba\u8a8d\u3068\u5207\u308a\u66ff\u3048\u3092\u30b3\u30de\u30f3\u30c9\u3067\u5b9f\u65bd\u3057\u307e\u3057\u305f\u3002f<\/p>\n<h2>\u95a2\u9023\u8a18\u4e8b<\/h2>\n<div class=\"sc_getpost\"><a class=\"clearfix\" href=\"https:\/\/lab4ict.com\/system\/archives\/14148\" ><div class=\"sc_getpost_thumb post-box-thumbnail__wrap\"><img decoding=\"async\" src=\"data:image\/gif;base64,R0lGODdhAQABAPAAAN3d3QAAACwAAAAAAQABAAACAkQBADs=\" width=\"150\" height=\"150\" alt=\"\u3010\u8a18\u4e8b\u4e00\u89a7\u3011RHEL\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a5f\u80fd\u3092\u4f7f\u3044\u3053\u306a\u3059\uff01\" loading=\"lazy\" data-src=\"https:\/\/lab4ict.com\/system\/wp-content\/uploads\/2022\/04\/fi_rhel_01-150x150.png\" class=\"lazyload\"><\/div><div class=\"title\">\u3010\u8a18\u4e8b\u4e00\u89a7\u3011RHEL\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a5f\u80fd\u3092\u4f7f\u3044\u3053\u306a\u3059\uff01<\/div><div class=\"substr\">RHEL\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a5f\u80fd\u3092\u4f7f\u3044\u3053\u306a\u3059\u305f\u3081\u306e\u8a18\u4e8b\u4e00\u89a7\u3092\u63b2\u8f09\u3057\u307e\u3059\u3002...<\/div><\/a><\/div>\n<h2>\u95a2\u9023\u66f8\u7c4d\uff08Amazon\uff09<\/h2>\n<p><a href=\"https:\/\/amzn.to\/3H8WqP7\" rel=\"noopener\" target=\"_blank\"><img decoding=\"async\" class=\"paapi5-pa-product-image-source\" src=\"https:\/\/m.media-amazon.com\/images\/I\/41Hsgz5kRSL._SL160_.jpg\" alt=\"N\/A\"><\/a><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>SELinux\u306e\u57fa\u672c\u64cd\u4f5c\u3092\u307e\u3068\u3081\u307e\u3059\u3002<\/p>\n","protected":false},"author":1,"featured_media":5291,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[886],"tags":[890,25,32,891],"class_list":["post-13667","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-rhel-security","tag-selinux","tag-25","tag-32","tag-891"],"_links":{"self":[{"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/posts\/13667","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/comments?post=13667"}],"version-history":[{"count":9,"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/posts\/13667\/revisions"}],"predecessor-version":[{"id":14153,"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/posts\/13667\/revisions\/14153"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/media\/5291"}],"wp:attachment":[{"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/media?parent=13667"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/categories?post=13667"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/tags?post=13667"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}