Shulou(Shulou.com)06/02 Report--

Treatment mode 1

Close selinux

Vi / etc/selinux/config

Change SELINUX=enforcing to SELINUX=disabled

Save changes, reboot server

Treatment mode 2

For specific process settings, a process can access only those files that are needed in its task.

For example, settings for ftp services.

Query command: getsepool-a | grep ftp

Results:

Allow_ftpd_anon_write-- > off

Allow_ftpd_full_access-- > off

Allow_ftpd_use_cifs-- > off

Allow_ftpd_use_nfs-- > off

Ftp_home_dir-- > off

Ftpd_connect_db-- > off

Ftpd_use_fusefs-- > off

Ftpd_use_passive_mode-- > off

Httpd_enable_ftp_server-- > off

Tftp_anon_write-- > off

Tftp_use_cifs-- > off

Tftp_use_nfs-- > off

Setup commands:

Setsepool-P allow_ftpd_full_access on

Setsepool-P ftp_home_dir on

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.