SELinux (Secure Enhanced Linux) 설치 방법 (CentOS 6.4)

- VMware Workstation 12 pro 

- ISO

> CentOS 6.4 64bit

- 설치

> serucrity1. / security1.  으로 설정했습니다. 

> 설치 완료 > 재부팅

> 사용자 만들지 않고 다음 > 날짜 다음 > kdump  다음 

> VMware Tools 설치

- 네트워크 설정

# setup

IP: 192.168.17.70

netmask : 255.255.255.0

gw : 192.168.17.2

DNS : 168.126.63.1

# cd /etc/sysconfig/network-scripts

# vi ifcfg-eth0

DEVICE=eth0 HWADDR=00:0c:29:3d:c7:bd TYPE=Ethernet UUID=84106dc3-3a03-45d2-a215-44275ced76a1 ONBOOT=yes NM_CONTROLLED=no BOOTPROTO=none IPADDR=192.168.17.70 NETMASK=255.255.255.0 GATEWAY=192.168.17.2 DNS1=168.126.63.1 IPV6INIT=no USERCTL=no

# chkconfig --list | grep -i networkmanager

NetworkManager 0:off 1:off 2:on 3:on 4:on 5:on 6:off

# chkconfig NetworkManager off

# service network restart

- SELinux 패키기 설치

# yum -y install policycoreutils \

selinux-policy \

selinux-policy-targeted \

libselinux \

libselinux-utils \

libselinux-python 

# yum -y install selinux-policy-mls \

setroubleshoot \

setroubleshoot-server \

setools-gui \

setools-console \

mcstrans \

policycoretuils-python \

policycoreutils-gui 

- 확인

# sestatus

SELinux status:                 enabled SELinuxfs mount:                /selinux Current mode:                   enforcing Mode from config file:          enforcing Policy version:                 24 Policy from config file:        targeted

# getenforce

Enforcing

# setenforce

usage:  setenforce [ Enforcing | Permissive | 1 | 0 ]

# setenforce 0

# sestatus

SELinux status:                 enabled SELinuxfs mount:                /selinux Current mode:                   permissive Mode from config file:          enforcing Policy version:                 24 Policy from config file:        targeted

# getenforce

Permissive