Linux 防火牆和SELinux的開啟和關閉

防火牆（firewalld）

• 臨時關閉防火牆
  systemctl stop firewalld
• 永久防火牆開機自關閉
  systemctl disable firewalld
• 臨時打開防火牆
  systemctl start firewalld
• 防火牆開機啟動
  systemctl enable firewalld
• 查看防火牆狀態
  systemctl status firewalld

[root@localhost ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: ena bled) Active: active (running) since Sat 2017-04-08 10:36:57 CST; 31s ago Main PID: 2856 (firewalld) CGroup: /system.slice/firewalld.service └─2856 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid Apr 08 10:36:56 localhost.localdomain systemd[1]: Starting firewalld - dynamic firewal.... Apr 08 10:36:57 localhost.localdomain systemd[1]: Started firewalld - dynamic firewall.... Hint: Some lines were ellipsized, use -l to show in full. [root@localhost ~]# 

SELinux

• 臨時關閉SELinux
  setenforce 0
• 臨時打開SELinux
  setenforce 1
• 查看SELinux狀態
  getenforce
• 開機關閉SELinux
  編輯/etc/selinux/config文件，如下圖，將SELINUX的值設置為disabled。下次開機SELinux就不會啟動了。
  

注意，此時也不能通過setenforce 1命令臨時打開。

[root@localhost ~]# setenforce 1 setenforce: SELinux is disabled

需要修改配置文件，然后重啟linux后，才可以再打開SELinux