I recently started to learning SELinux and I am so new on that.
So I've faced an issue and I have question,
I use CentOS 6.5 and I am learning SElinux via video training. Into the video training SELinux target version is 18 and mine is 24.
The trainer talk about one boolean named httpd_disable_trans in directory /selinux/Boolean But I can not find this Boolean in my Linux. Is there any difference between those versions of SELinux or I should add this Boolean to mentioned directory manually or ... ???
-
I'm not sure that boolean exists anymore. What is the problem you are trying to solve?– Michael HamptonJul 28, 2014 at 16:53
-
I am trying to disable SELinux access to Apache in CentOS 6.5 .... In my video training there is a boolean "httpd_disable_trans" in RHEL4.0 ... But haven't !!!– DebianJul 28, 2014 at 17:32
-
You shouldn't need to disable SELinux at all. Again, what is the real problem?– Michael HamptonJul 28, 2014 at 17:41
-
Thanks Micheal for quick answer. I don't want to disable all SELinux. I just want to disable SELinux for "httpd" on CentOS.– DebianJul 28, 2014 at 18:20
-
1I think you have missed the point. Why do you want to do something that isn't a good idea, and doesn't exist now anyway, simply because you found it in an outdated and apparently low-quality training video? Skip it and move on, and consider looking for better training.– Michael HamptonJul 29, 2014 at 0:16
|
Show 2 more comments
1 Answer
The current way to stop SELinux enforcement for a single type is with semanage permissive.
For instance, the Apache web server runs under type httpd_t, so to make this type permissive:
semanage permissive -a httpd_t
To restore the defaults and enforce SELinux policy for httpd_t:
semanage permissive -d httpd_t
answered Aug 2, 2014 at 3:47
