Commit 56e20f5f authored by wojiushixiaobai's avatar wojiushixiaobai

[Fix]更新selinux说明

parent 01f9cdd6
......@@ -196,7 +196,7 @@ FAQ
$ systemctl stop firewalld.service # 临时关闭防火墙, 重启后失效
# Centos 7 如需永久关闭, 还需执行下面步骤
$ sed -i "s/enforcing/disabled/g" /etc/selinux/config # 禁用 selinux
$ sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config # 禁用 selinux
$ systemctl disable firewalld.service # 禁用防火墙
# Centos 7 在不关闭 selinux 和 防火墙 的情况下使用 Jumpserver
......
......@@ -38,7 +38,7 @@ CentOS 7 安装文档
$ firewall-cmd --reload # 重新载入规则
$ setenforce 0
$ sed -i "s/enforcing/disabled/g" /etc/selinux/config
$ sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config
# 修改字符集, 否则可能报 input/output error的问题, 因为日志里打印了中文
$ localedef -c -f UTF-8 -i zh_CN zh_CN.UTF-8
......
......@@ -16,7 +16,7 @@
$ echo -e "\033[31m 1. 防火墙 Selinux 设置 \033[0m" \
&& if [ "$(systemctl status firewalld | grep running)" != "" ]; then firewall-cmd --zone=public --add-port=80/tcp --permanent; firewall-cmd --zone=public --add-port=2222/tcp --permanent; firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="172.17.0.0/16" port protocol="tcp" port="8080" accept"; firewall-cmd --reload; fi \
&& if [ "$(getenforce)" != "Disabled" ]; then setenforce 0; sed -i "s/enforcing/disabled/g" /etc/selinux/config; fi
&& if [ "$(getenforce)" != "Disabled" ]; then setsebool -P httpd_can_network_connect 1; fi
.. code-block:: shell
......
......@@ -29,7 +29,7 @@
$ firewall-cmd --reload # 重新载入规则
$ setenforce 0
$ sed -i "s/enforcing/disabled/g" /etc/selinux/config
$ sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config
# 修改字符集, 否则可能报 input/output error的问题, 因为日志里打印了中文
$ localedef -c -f UTF-8 -i zh_CN zh_CN.UTF-8
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment